How to build a safe centralized exchange: lessons from our past