It is reasonable to expect exchanges to implement preventative measures, not to pursue thieves themselves