The source of most hacking is either through database leaks from other sites where people have used the same passwords or through malware and malicious applications. That means the hackers will have compromised a large number of accounts at the same time. If they try and make a large number of withdrawals simultaneously there is a high chance they will be spotted and blocked by us. ~
But how the hacker easily get access into the account without facing login approval process? Do they also get the IP details of the user with database leaks? We all know that freebitco sends a login approval message to the account email if a user tries to login from new IP address. Adding 2fa is enough to secure account but a lot of people don't like to set it.
Isn't it possible to bring some changes in the login approval system? As example, user will receive a security code through his email during login no matter if it's from whitelisted or new IP address. I have seen this system at few many gambling, trading and crypto wallet site.