The presumption should always be that you don't invest what you can't afford to lose. That way if things go horribly wrong, as in Mt Gox, you won't go to the poor house because of that risk. At the same time its ridiculous to assume that he would put himself in a worse position then that. The best he can be expected to do is chart a course where the site can continue to operate and avoid future errors to the extent possible. The most frequent option is to just give up and give people back a percentage, as suggested. Its the most frequent because its the easiest. ..it also is the least productive for everyone involved, leaving the only winner in this to be the hacker. ..thats what should not happen.