So, I've got a theory, and here are some interesting tidbits...
- I created an account a few days before the hack and it appears in the export (57051,"bigshot").
- Around the same time around 6000 random looking accounts were created (from 52709,"hyquoshy" to 59354,"crostypa"). Was that part of a DDoS attempt, or some sort of known-text attack?
- Kevin says that he attempted to raise his withdrawal limit prior to the attack.
- MagicalTux says that Kevin logged in 3 minutes before the sell off and placed a large order at $0.01
