What gave you the impression that coins were stolen? The twitter thread only mentioned that a few people's domains were hijacked, and that the victims all had their emails (and hence domains) exposed in a recent hack/leak of Ledger. It's conceivable that after hijacking a domain, you can gain access to the victim's cryptocurrency exchange account via password reset email and steal coins that way, but most exchange I know require multiple factors (eg. passport scans, phone/sms verification, waiting periods, security questions, etc.) so a hijacked email isn't going to do much.
That's true, but where in my comment does it suggest that keeping coins on an exchange account is a good idea? If you're a bitcoin whale, there's invariably going to be a decent amount of coins worth stealing on an exchange account somewhere. The only reason exchange accounts were brought up is that's the only conceivable way a domain compromise can lead to coins being stolen.
Comments
What gave you the impression that coins were stolen? The twitter thread only mentioned that a few people's domains were hijacked, and that the victims all had their emails (and hence domains) exposed in a recent hack/leak of Ledger. It's conceivable that after hijacking a domain, you can gain access to the victim's cryptocurrency exchange account via password reset email and steal coins that way, but most exchange I know require multiple factors (eg. passport scans, phone/sms verification, waiting periods, security questions, etc.) so a hijacked email isn't going to do much.
There is a security solution that is much stronger than 2FA, passport, etc. It's called a hardware wallet.
That's true, but where in my comment does it suggest that keeping coins on an exchange account is a good idea? If you're a bitcoin whale, there's invariably going to be a decent amount of coins worth stealing on an exchange account somewhere. The only reason exchange accounts were brought up is that's the only conceivable way a domain compromise can lead to coins being stolen.