It sounds like the localbitcoin guys did everything right. Anyways, it is incredible, that people are still able to pull the "reboot my server please" attack in 2014..