Hacking a crypto exchange is not the only way to steal coins. Decentralized applications/smart contracts on a blockchain can be attacked as well.