Still vulnerable.
We are investigating this issue and have temporarily disabled login for existing users, the registration of new accounts and virtual currency withdrawals. These measures are "just in case" temporary measures while we wait for our DDoS mitigation service provider to fix this issue. Our backend was already patched.
Thanks for the update Hazek, keep us informed when Cloudfare get back to you and services are resumed.
We are not with Cloudflare, our DDoS mitigation is provided by Incapsula.