Lessons from Zaif exchange incidents and rebuilding long term user confidence