How about this going forward - financial services providers obtain insurance to cover them in the event of theft/fraud etc, and on the basis that they demonstrably exercise a duty of care and dilligence in their business dealings and in their fiduciary duty to their customers (it may be that the insurer requires a compliance with regulation perhaps ?).

   I buy 5 BTC on BTC-E that subsequently proves to have been stolen from XYZ exchange (and customers A ,B and C) - customers A, B and C receive their stolen BTC back. I (and BTC-E) receive recompense from the insurance company of exchange XYZ.