Why stealing billions from a crypto exchange can be harder to stop than a bank theft

Crypto exchanges can move huge sums with software, not vaults, which changes the mechanics of theft and the mechanics of response. For PSPs and acquiring teams serving high-risk merchants, the useful question is not whether fraud happens, but where the weak point sits: at the wallet, the exchange, the rails, or the moment funds are converted.

1. In a bank theft, the target is usually a controlled system with a small number of chokepoints. In a crypto exchange, the same value can be fragmented, moved, and relaunched through a much wider set of addresses and venues, which makes containment a different problem altogether.
2. The article frames the issue around the scale of losses: billions can be stolen from a crypto exchange. That is the part payment teams care about, because once funds leave a controlled environment, recovery becomes a coordination exercise rather than a simple reversal.
3. For high-risk payment providers, the practical takeaway is that exchange risk does not look like card chargeback risk. The relevant controls sit in wallet monitoring, settlement controls, transaction screening, and the ability to spot abnormal movement before funds are dispersed.
4. The comparison with a bank theft matters because banks operate inside a tighter operating model, while crypto infrastructure is built for rapid transfer and cross-venue movement. That difference is exactly why incident response in crypto tends to be slower, messier, and more dependent on traceability than on immediate blocking.

For PSPs, acquirers, and bank partners, the lesson is straightforward: when a merchant touches crypto, the risk is not only the merchant’s behavior but the speed and structure of the rails themselves. That affects underwriting, monitoring, reserve decisions, and how much exposure a provider is willing to carry.