As you all guessed, I'm not using two-factor authentication / yubikey.
But nobody else knows/knew my username/password combination and I'm the only one using my computer, from home.
Geolocation of the IP (that requested the withdrawal), leads to Egypt. I'm in Europe.
Why exactly 60 bitcoins, why not all 129 ?