While sad, this doesn't surprise me in the least. I reported probably half a dozen vulnerabilities, none of which I believe were ever fixed. I tried to stress

While sad, this doesn't surprise me in the least. I reported probably half a dozen vulnerabilities, none of which I believe were ever fixed. I tried to stress the impact of the vulnerabilities (which ranged from CSRF to XSS to, I believe, SQLi, although I can't recall whether that was MyBitcoin or elsewhere) and it just didn't sink in. If you're going to deal with money in any way, please for the love of god, think about security. Even if you're not going to have an external security test, at least internalize the OWASP Top 10, how to recognize and discover them, and their mitigations.