The coins stolen from Mt.Gox were not stolen using any CSRF exploit.
So they were stolen from Mt.Gox using another exploit...?
No, they logged in on users account using the correct login and password. We have logs showing the loggin succeed on first try.
Then I suppose you have the IP address of the person who logged in to the accounts?
Also, I have not yet received a response to my tickets #957/#1797, nor to the PM I sent you on this forum.