Ask the exchange to provide its security and risk concept, this will show you if they are a good or bad exchange. 
Regulation would force transparency to their security procedures.