The attacker was able to empty the balance on accounts with the API key enabled. The issue is being actively looked upon. API access has been disabled.
Everyone who has lost money will be fully reimbursed.
Do we know the absolute total amount of BTC that was stolen that is users' coins?
If so this should be interesting to see you accomplish.
Any timeframe you looking at to fulfill the above statement?