I still can't fathom how they did it. I only signed in from one device. The password was stored in Chrome's manager and on my desktop, and that's it. I had a Chrome extension that wasn't properly vetted, but then I'd have thought they'd try and access my trade accounts, but nope, just Bitcointalk. It does makes me wonder if this site is compromised.

Anyway, back to up, up, up. Congrats to all hodlers.