Putting 336 Bitcoin in a web wallet should be considered a crime by itself!
Even more so when a company does it. It isn't difficult for them to buy hardware wallets to store all that in there. They haven't even acknowledged the hack on their website.