I have been using this site for years well about six weeks ago I decided to deposit some bitcoin in here for the %4 interest not a lot luckily as my account was hacked apparently, I never had an email to confirm address change I was on the site on the 2nd and by the 3rd someone had changed my email address my wallet address and withdrew all btc in less the 24 hours.
Now if that is not a sign of a hack I dont know what is surely the should have some security is it cryptopia or polo where if you change a wallet address you cant withdraw until 48 hours later
The hacker would have needed your password (you used the same on other websites?), then he can change email. After that he receives all new notifications instead of you.
If à substantial amount is on your balance, best security way is 2FA.