Your argument is invalid because it's based on the wrong assumptions. Money was not kept on a centralized exchange, but in a multi-sig wallet. This loss was due to a bug in the wallet.