The biggest mistake they did is by not implementing multi-signature security check. Most of the exchanges (Bitfinex, Coinbase, Bittrex) have this feature to enhance the security. They are in big trouble right now.