I messaged PhantomPhreak, but if any XCP developers are online right now, please message me right away.

The attacked left 35BTC in his account. He has been very cooperative so far and has asked for an address to return the BTC he took. I'll keep you all updated.