Without access to the account, it is impossible to trace the amount of coins at a user's address. User coins are first moved to hot storage, mixed, and then transferred to cold storage, which is impossible to hack - cold storage is completely isolated from the Internet.
