BitVegas forgot to mention it here, but a patch has been applied:
Hey everyone. Someone was able to log in and withdraw from user accounts today. The total number of lost bitcoins was 1.77195 sent to this address: 12yJiutWoEutrTTyXf4t5UYNjZujFTwsNm
We will have no problem to reimburse this amount to the accounts that are affected.
We are looking into the problem now to fix this for the future. Withdrawals are temporarily disabled to stop any future attacks.
Update: The security has been updated to address this issue and funds have been replaced. All users are required to reset their passwords.
Withdrawals are still disabled while we do some further tests, but if you need a withdrawal urgently please simply message me