Sorry, I mean crypto hacks specifically. Most crypto traders/companies/firms have apps and monitoring tools set up to report any suspicious activity on their wallets or contracts. Unfortunately it's sometimes too late at that point, but sometimes not[1].
Ah, that makes more sense. I'd be curious how what the timing is like between the compromises which give people access to keys or supporting systems and when the attacker does the noisy part of moving funds around.