Apples and oranges comparison. How many of those breaches were from people who stored their keys safely and didn't interact with smart contracts? That's something a person is able to do. Guaranteeing your fiat is safe in some places is simply impossible.

Actually if someone fraudulently removes money from my bank account, I am not liable for the loss. Protections with credit cards are even stronger.

I was subject of an exceedingly well timed and executed email phishing attack which convinced me to use my online banking system to deposit 100k into the attackers account.

Got the money back in full.

God bless the fiat system.

> If hundreds of millions of dollars can be lost by professional crypto firms employing crypto engineers, what hope do Bob and Sally have?

Haha I'm pretty pro-crypto but "professional crypto firms" almost sounds like an oxymoron...

All Bob and Sally have to do is use a private wallet and store their private keys with redundant backups. Not foolproof but pretty straightforward. The engineers running the exchanges, markets, etc have way more attack vectors and pitfalls to worry about.

And how do Bob and Sally use their totally offline cold storage for.. uh.. anything other than paperweights?

Oh, right, they need to unfreeze the wallet using something like metamask and then execute a transfer, running against a service they can't audit... and hope there are no scams in that process, and that metamask isn't vulnerable, and that they only click the right authorization prompts..

Of course this assumes they aren't transferring from a known terrorist or a company ignoring KYC laws which might also land them in hot water.