2fa doesn't necessarily have to be something online. For quarter million dollar transfers, it could, and probably should, require some steps of offline verifica

2fa doesn't necessarily have to be something online. For quarter million dollar transfers, it could, and probably should, require some steps of offline verification, like needing the CFO to sign off on it too, or a quick phone call to make sure everything is on the up and up. Hell, the CEO shouldn't even be handling these transactions. I don't know of a single other place where the CEO would be this involved, especially if transfers of this size are "routine". This is just poor accounting top to bottom.