Something tells me that WazirX's cold wallet wasn't actually cold - it was multisig but hot. The only thing that leaves the hardware running a cold wallet is a

Something tells me that WazirX's cold wallet wasn't actually cold - it was multisig but hot. The only thing that leaves the hardware running a cold wallet is a signed transaction that is limited in scope to the signed amount and recipient.