I know that you are not only a reputable member of the community, but also a careful one, but in the light of some recent events, I will come with two advises (which I hope you already know and follow, but better one too much than one too few) :

* Always use messages signed with your address and ask the same from the parties of the deals. Make sure the parts are aware that only such signed messages are meaningful. Impersonation is a big risk in your business.
* Always store all the funds you need to work with on hardware wallet or cold storage. Just now a campaign manager has opened a topic saying that he got hacked and lost 5000$.