2.5B is a whole lot of money lost, but we have to consider that bybit exchange lost $1.5B of that and Cetus exchange lost $220m, so if these services had invested in their security, then the losses would surely not have been this high. So as people learn to secure their funds from scammers, they should obviously not store it in any third party service, because they could easily lose it there, not your keys, not your coins.
I will till give them the benefit of the doubt, maybe they really invest some money on their security, but we all know that this cyber threat will always be there. And we have seen that this criminals are targeting their employees, and do reverse engineering so that they can have access. If there is one thing that they would invest, then it should be in their employees to learn that they are now a target. We can't really avoid exchanges as most of us are trading and wanted to make profits. So we should be trading on exchanges that we know that funds are safe, or at least SAFU so that we can get back our funds although it might not be 100%. But at least their is some compensation and yeah, withdraw your funds right away if you reach some threshold as far as your profit goes.