So the "cold" wallet was on a website? Fuck that mean?

And can't ethereum do multisig properly? Wtf?

Like.. I don't understand why this is an eth problem? Couldn't they have stolen their Bitcoin just the same?