They screwed up key generation, old storage should be generated on a permanently offline system, and signing done on that system where needed, with signatures relayed by thumbdrive or similar. Generated on an Internet-connected device (or worse, on cloud hosting), or printed over wireless, or not enough entropy in the random source, or too many people had access to the keys.
Now if they just employed your services they would not have lost so much of peoples bitcoin and they also would not be about to shut down because of it, i can't see anyone trading there again after this although i maybe wrong but i won't be putting another coin on that site not even for a quick trade they have lost all credibility from security to customer service f- all the way..