[michaelbuckbee]

So you have a case like this: the funds were moved with the private key. 24 hours after the owner comes and says: ‘I didn’t do that! Someone else must have copied my key and made that transaction!’

How does the exchange handle that? What’s the dispute mechanism?

[aptwebapps]

It's the exchange's own key that is thought to be compromised, not one of their customers'.