This isn't the first time MintPal has been egregiously faulty. A few days after their launch they lost 40 BTC due to a bug in which users could exponentially withdraw BTC (one user took advantage of this and pulled 40 BTC).