There is no regulation that prohibits the exchange owner from stealing the coins of all clients and blaming it on "hackers".  (Serious reply.)

Common property theft laws would apply in the latter case, but they are hard to enforce if the exchange is in a foreign country and the owners are anonymouous,  The laws against insider trading do not even apply, the exchanges are not registered or regulated as markets.