None of the issues have been fixed yet. Seems that OP thinks its ok to have a bugged site.
A month ago had a member who bought account and created a double site. The site double had the same vulnerabilities as you reported, but at the time the site owner ignored and the next day disappeared with all investors' bitcoins
I noticed that, last month he made the same accusation with a member account. I can not find the post that he accused you with the member account.