It is user responsibility to check what is valid deposit address. On the other hand, exchange guys should have a backup of all private keys used.