Dear Boussac,
.........
Sincerely,
PyedPyper
As thoughtful as this letter is- it might not be possible for them to answer. Even if there had been no funny-business any legitimate company would hire a lawyer that would advise answering none of these questions. What if they were to answer you wrongly about one of these questions? Perhaps just from not 100% understanding the situation? You or someone else would turn around and go after them about that later.
It's a legitimate letter, but I think any lawyer would advise "no comment". It's just too risky to tell you the truth- innocent or not. Indeed, perhaps the things you point out in your letter about their "50BTC" limit, or "first come first serve" might be the result of them trying to come up with a clear, concise, and honest communication to the community, as quick as possible, the only result of which is more accusations and mistrust.
Valid point. However, to prove their good faith I will still expect a response to each point, even if that response is "our legal counsel has advised us to not answer this question". The sum total of their responses will certainly reveal if these guys are being straight. And if there is any sign that they are not being straight then I feel it is prudent to take this to the relevant authorities. In offering the services they do they have a direct fiduciary obligation to both exercise care in the management of funds and to communicate transparently with their clients. The latter has certainly not been happening.
And despite what any legal counsel may propose, their obligation remains. And certainly we have a right to know the truth. Frankly at this point no-one even knows if there genuinely even was a hack.