Bitfinex is listed as still being vulnerable to the Heartbleed OpenSSL attack.

http://www.reddit.com/r/Bitcoin/comments/22gq5e/heartbleed_bug_major_openssl_vulnerability_could/cgmyzwz

Bitfinex: Please let us know that you are applying the appropriate fix as soon as possible. Personally I am uncomfortable communicating my login credentials to bitfinex.com until the fix is in place.

I suggest everyone be very cautious here.