if I remember well there is something called monitoring in IT. some stuff that sends alerts on threshold apparently...
Some even use it to have automatic actions when an alert is raised.
mcxnow ( the exchange every one calls scam ) shuts down on any suspicious action
also they never lost 1 fucking coin
fucking exchanges stealing coins then blaming a dev LOL