It happened to me with Stake.. I think a big security flaw is how "anyone" can just change wallet and in the next 5 seconds empty the account to the new wallet, no whitelisting or anything like that. they do offer 2FA fair enough, but many ppl using VPNs (which is the norm) struggle with getting 2FA on a device approving login on the one with the VPN and so on. I have started looking for smaller/ new crypto bookies as they are the most likely to look after you because they want business, whereas Stake already act like your corporate established bookie that has enough business, almost like ppl want them not the other way around.. but hey ho, I guess Tony Soprano was right when he said "it's always good to be into smth from the ground up"