Personally I don't think any funds were stolen, it looks like they manage to freeze up and put the funds in cold storage before any damage was done. As the notice says, because of the nature of Instawallet (your URL being your private key), putting the service back online wasn't an option. Looks like good news to me