Outsch! thank you very much for this one. This is why i don't leave big amounts of cryptocurrencies on the exchange. Exchanges could make their platforms very secure if they would make multisig for login mandatory. There are very good solutions ou there. ironically NEM proposes such multisig smartcontract. It is very negligent in my opinion to let customers join and send and store funds to/on their account only using a password as a security measure. Maybe they fear making login procedure to complicated will lead to less customer registrations? btw you are in.