What if the account of an asset issuer gets hacked?