The more serious thing is that we may need additional time to provide the details. We are working with Rackspace to know more about this issue.
EDIT: There's no additional financial loss. We have revoked the withdrawal API key.
Some people said you should never host with a VPS or do dedicated hosting and instead do everything with colocation hosting. What do you think of that?