We found a user who found a bug in the script and robbed us of BTC. Here are two addresses BTC, which we found:
https://blockchain.info/address/1Lhko5qEmpzDPufotk4DdDquo9fPGTVzDL
and
https://blockchain.info/address/1BDfZ2oLz7XjAB12cWUoSJTM2ui2WL3e7Q
It is possible that there are more.
Username: johepinski
Name and surname (probably not real): Andy Svenson
Email Address: johepinski@gmail.com
IP: 89.166.191.68 and 89.233.76.70
It is possible that the user withdraw some other coins, we are no longer solvency and we can not continue to operate without zero balance accounts of other users

I'm sorry for my English