Some questions to ask coinpayments:

1) Are the specific funds missing their funds or their customer funds? Who owned the funds that were stolen?

2) Are they accepting or conceding their liability for the missing amounts? Their emails are ambiguous.

3) In what units are they tracking the missing funds? Are they planning to return the amount of XRP missing or the equivalent USD value?

4) If they are not liable, what is their theory for why they are not liable?

5) If they are liable, what is their theory for why they can impose this loss entirely on one class of their customers? What is their legal theory justifying them imposing their choice of which customers suffer from the loss and which don't?

6) Are they going to disclose what happened in sufficient detail to allow affected customers to evaluate the these questions themselves? If not, do they agree that this virtually forces affected customers to either trust them on no basis at all or sue them?