You should also note that Bitfinex used to have a much more secure setup, with most of its Bitcoins being stored in cold, offline storage. However, US regulation required them to use segregated accounts for each user. Under such a requirement, the cold storage variant does not work any more, so they moved to keep everything online so they could physically move the Bitcoins back and forth as they were used for margin loans within Bitfinex. It was too much misguided regulation that made them vulnerable in the first place.