We are working on a solution where exchanges can set daily rate limits on withdraw activity from their account.  Their "warm storage account" could be online allowing them to withdraw X% per day to their "hot storage account".  

The downside from a user's perspective is that attempts to withdraw your funds would be rate limited by the same algorithm.  But at least it would be transparent why there is a delay in withdrawal.