Original title was something like "Enigma's ICO hacked, $500,000 stolen. CEO reused password. No 2FA." For one, my understanding is that the Enigma's "website,

Original title was something like "Enigma's ICO hacked, $500,000 stolen. CEO reused password. No 2FA." For one, my understanding is that the Enigma's "website, email lists and other property" was compromised, not it's "ICO". Second, the $500,000 was scammed out of users/investors rather than directly stolen in the "hack". I think for crypto-coins this is an important distinction.