Inputs.io was hacked twice in 2013. Attackers compromised email accounts used for password reset and bypassed two-factor authentication due to a flaw on the server hosting side. The attacker stole 4,100+ BTC across the two separate hacks.