how do they manage to take off with all the VRC when it requires 2FA to even proccess the withdrawl request... ?  this sounds to me like the Private keys for the hot wallet were exposed.. somewhow.. which is scary to consider.