Again the weakest element in security is human. Whatever methods, and how many security protective layers are used, if human in the procedure does not do their jobs rightly, securely and safely, sometimes they will be exploited by hackers who surely put human resources of a target company into their radar. Hackers will try to do different things to trap a company's staffs and over time they will succeed eventually.
-snip-
It's important to keep secret who is behind the internal team that manages everything, so hackers can't target someone important who is connected to the core system.
If this is not the case, there will be many threats occurring.
But anything can be manipulated and hacked by hackers with various kinds of methods, including social engineering, which is a method that works online and offline.
Binance did not learn from the hacking of other exchanges and platforms that took advantage of its human weaknesses and the devices used.
There are many gaps actually, but trying to close those gaps and make them unmanipulable is something that needs to be done and paid more attention to.