Why is there no mention of a auditory and standards process for service providers like banks do with PCI? This isn't play money.. At the very least there should be a movement against the practise of remote bitcoin storage. Vendors can just query the block chain if they need proof of balance.. Anything with an escrow needs a verified identity behind it to avoid exit scams..
All this you mentioned can only happen when there is a regulatory body to ensure such but not the case here. The .market is a perfect market where the demand is even more than supply and even if the loot from the heist is released to the market, it is ready to be bought off and that's why the effect is not felt for long and even it might come with increase in the price of bitcoin. Although, I admit its a weakness, but there is hardly what anybody can do about it at the moment.