Despite taking as many precautions as possible, somehow my withdrawal address was changed and all of my investment withdrawn. Having investigated further, Aprilcoin has no security to prevent this from happening. No 2FA, no way of confirming transactions by sending an email and clicking on a link. In addition, Aprilcoin support were not at all interested in my problem or intend to implement better security.