So their backend allowed withdrawal transactions without 2FA control. Not a good sign for a system that should thrive on secure transactions.

Ethereum seems to be the token most prized during a breach, most likely to be used on tornado.cash.

Cheers