@shasan, if I can remember correctly then in the past someone [may be more members] suggested you to ask for signed message from the borrowers. I hope you are practicing it in your business.
- Reused password.
No one is hack proof but reusing password deserves to be hacked or you will not learn lessons.
If anything happen to an account and the account takes any loan then the original account holder is responsible for it. There are no escape.
Asking for a signed message from a known address of the one who asks for a loan should be a compulsory point. If wasn't asked, it is a negligence of a lender.
We don't even have to be sure in that stories about different kind of account hacks are true. Since there are any of these stories, asking for a signed message should be a must. It is not anything too complicated, but it gives an additional level of sequrity.
I never ask and will never ask for a loan on this forum and I don't want that someone will give a potential hacker everything basing on my reputation. Check and recheck is what expected from a lender.