When I was a part of a (crypto) financial world, many startups failed, because they underestimated information security basics. A potential client once replied to my proposition to collaborate: ‘We are in rocket science business not crypto. We don’t see many breaches.’
One month before hitting one of major crypto-exchanges, those same guys hit NASA.

Rocket-science? No intellectual value there, no industrial espionage enviewed?

‘Startups don’t have the resources [time, money, employees,…] to address informations security’ was the second argument.
That is precisely why so many high-flying investment-boosted startups get hacked.

Hackers love promissing startups. I believe they have also learned on that playground that hacking via information security basics and hygiene also works excellent with big companies.

It’s the ‘low-hanging fruit’ as our crypto-startup CEO would put it.