Anybody at other bitcoin exchanges have info/ideas to share on what may have happened here and how other exchanges can avoid similar pitfalls? It's intriguing that withdrawal limits were bypassed.
I wonder what sort of monitoring+alerting their team had set up and how long this attack ran for.