The fact that $3 million could be transferred quickly in the Gamdom incident shows that the hot wallet or authorization layer exposed assets far beyond a reasonable proportion, violating the basic principle of cold-hot separation.