Could double confirmation of tokens in the bank not be a potential fix? Or a semi automatic system where there's a cool down period of x number of hours between requesting an item stored or removed from the vault before it is delivered ? Cold storage so to speak?