The bug has been fixed and the site is back up.
Our apologies for any inconvenience this may have caused.
And more importantly ... has anyone lost money ?
while the exchange course fell and could not react? possible.
Not the kind of loss I had in mind. Rather has anyone stolen
any money using the API flaw.
Everything looks accounted for in my books.
What likely happened was that the API allowed for negative values in the number of shares to be bought or sold.
The BTC volume of the trades in question was less than 2.5 BTC. Any accounts affected have been compensated for any losses that occurred.
stochastic is correct. There was an API problem that allowed negative inputs which has now been corrected. No theft occurred, and no accounts were compromised.