mintpal said hackers were able to "inject a withdrawal request directly into our database". I call bullshit. Only vrc were stolen.
https://twitter.com/casacup/status/488609939892740096
https://twitter.com/casacup/status/488609939892740096
A mysql query injection? That's a site security hole, and could potentially affect any coin. That makes little sense. If they were able to inject a query into the database, why not steal other coins?