@bitfinex,
Any updates on POODLE? I just emptied my account just in case, and checked that SSLv3 is enabled in your site:
$ openssl s_client -connect bitfinex.com:443 -ssl3
[
]
New, TLSv1/SSLv3, Cipher is ECDHE-RSA-RC4-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
Protocol : SSLv3
[
]
Why is there no statement about this exploit anywhere? You should put something up on the homepage right after it became known.