Bitbook fucked up, and they want to throw him under the bus. They don't like that they had a huge risk on their site. Instead of thanking the guy for showing them the hole, the want to take his BTC? They should be PAYING that man for not just transferring to another account and inst withdrawing. Their withdrawls are automated, they NEVER would have seen those coins again had OP done that.
Right!
I don't know the right response, but Bitbook's was definitely wrong.