pull down to refresh
From Adam:
An attacker gained access to a bunch of accounts. My best guess at this point is they brute forced the passwords over some period of time and were sitting on them waiting for an opportunity to drain them all at once. A small handful had been drained over the last month or two but last night about 130 accounts were hit. I've put in some measures to try to rate limit login attempts now and I may consider adding minimum password strength requirements.
reply
updates from Adam (from latest to earliest):
It should be back now. Try hitting https://coinos.io/logout if it's coming up blank
The funds should all be restored but affected accounts may need a password reset — they can request one by emailing support@coinos.io
The website is down until I get a better handle on what happened and can be confident the attacker is not going to be able to steal more funds. I intend to fully compensate anyone whose account was compromised.