Wait patiently, OP. I see no reason to attack after just 2 days of waiting, especially since you've withdrawn so much money from them without any problems.


So according to you they only have 1 address? Good job detective!
Even if they were really out, converting funds takes not more than a few minutes, so they can quickly generate enough of a given token in case of a large withdrawal.