What are ways a BTC Exchange could steal from its customers, and how can they protect themselves?
One way an exchange could prove that it is liquid is to move all the funds from one address to another, and publish the transactionID.  This would be visible in the block chain.