Bitcoin has many flaws but in this case some major screw ups within BitPay were the root cause of the theft. Analyzing these can help to prevent similar mistake

Bitcoin has many flaws but in this case some major screw ups within BitPay were the root cause of the theft. Analyzing these can help to prevent similar mistakes in the future. - Why was the Google Account of a CFO (of a financial organisation) not secured with 2fa (most likely) and if it was how could it be breached? - Why did the CEO just sent the money ("an hour later" suggests that no much research could be done)? - Why did he send it the second and third time and only then CC the "customer" company? - Was there a paper trail of the fake purchase (order / confirmation / invoice etc) and if yes how could it be forged if no why didn't it exist? I suppose there are some details missing in this article and the attack was probably sophisticated and well prepared, however this is something you have to prepare for. If you are a financial service dealing with substantial amounts of money you have a red mark painted on your back at all times and since trust (in you, your organization and the whole bitcoin community) is one of your major assets an incident like must not to be taken lightly (I don't think it will)