The private keys used in the multi-signature script are directly derived from the users’ passwords (using Scrypt and key stretching), which ensures that users are always in full control of their funds. Even in the worse case scenario of Bitrated becoming permanently unavailable, private keys are always recoverable by the user and access to funds is never lost.
We’re currently working on a tool to help users go through the process of recovering their keys and signing a transaction releasing funds from the multi-signature address to an address of their choosing.
If you’d like to receive updates about the availability of this tool, please follow us on Twitter, Facebook or Reddit.
If you have funds held up in the system and need to urgently release them, please reach out to us for help at [email protected]. If it’s not urgent and can wait for a little while, we’d like to request that you allow us for some time to publicly release the tool.
You can read the full post here: https://medium.com/@bitrated/bitrated-clarifications-regarding-ongoing-ddos-attack-and-extortion-attempt-61709556a9a9
BTW, it appears like the DDoS attack have stopped for now. Bitrated is back online.