Why did the employee have direct access to $6.3 billion in customer funds?
No directly, but he could deploy code that had access to customers' wallets. Which is even worse.