I am going to give them, the benefit of the doubt, but I just logged in to their website and ALL of my funds were gone, cash and BTC. Almost $3500 worth. I am using 2FA and a less than week old random 14 character password, so my guess is that there is something wrong with their site or it got hacked last night. All of the transactions were done within a few minutes of each other, so I assume this was someone who had a bot and found a backdoor in their API. Still doesn't explain how they could transfer out without either an email or using 2FA. Most likely a database bug and I will accept that, as long as they reverse the transactions.