I would guess they also have some kind of insurance. iirc one of the larger exchanges was hacked and lost millions, but the insurance paid out and made whole the users who lost coin. it's a dynamic market.