This is a real case happened with my friend on bittrex,
He's got hacked 10k USD, withdrew in BTC to another account. He cried it to the support team and guess what??? They replied with a sorry email including an activity report of his account.
SO BE CAREFUL GUYS...
And that`s why I think that audit report is most important part of the any project!