Why can't we escrow these say 10 million plus wire transfers for long enough to seek some form of two factor authentication? Fax a random code to the head office or something? Seems like a pretty weak system.
I am sure that the Bangladesh Central Bank could have requested daily or transaction limits for their accounts. But they most likely did not have that in place. Being a government bank they might make $20M transactions on a daily basis. They probably also could have 2-factor authentication, but that won't help you if its an inside job.
The most telling part of the story is that you can transfer $80M into Manila casinos (a city I didn't even know had casinos before today) and get that in chips without any trouble. I can't even imagine the volume of money flowing in Vegas or Macau casinos.
Reminds me of http://www.theguardian.com/business/2015/oct/20/deutsche-ban...