Only 438 BTC taken in this attack, eh? We've seen worse. I can already hear TheButterZone waking up in a cold-sweat, screaming himself awake in the dead of night over this kind of thing. This is specifically why people tell users to avoid using exchanges at all, but especially to use them as trusted storage. Lauda said it, these exchanges are not set up in any organized or qualified manner and it often is luck not competence that provoked a particular exchange to the peak of popularity. Once these exchanges become popular and have large holdings of Bitcoin these failures become exploited viciously.
It seems promising that there is every sign that the funds will be returned to their owners with the exception of only losing whatever trade profit they could have earned during the time of investigation.
Good call to remove the moderator, even if it is only a temporary measure, because this is a dicey situation that needs to be tread upon lightly.