Any exchange is risky. It is only a matter of time before someone eyes all the millions of dollars in their possession (either internal or external) and comes up with a way to take off with it all. Just buy and get you coins out of there asap and you minimize this risk. As soon as the first sign of trouble appears, stop doing business with the exchange.
Cryptsy showed signs for quite some time something was amiss which many (myself included) choose to ignore. Fortunately I only lost a small amount, which I consider payment for an important lesson. Unless the funds are in your possession, you can never be sure they won't disappear.
Good advice. Paper wallets are your friend...just don't lose them
On a similar note, Poloniex locked my account last month because 'someone tried breaking in to it'. They wouldn't give me any information about this alleged attack, just that I need to give them my SS#, photo ID, address, blood type, sexual preference...then they'd give me my account. How the hell is that sufficient? The attacker could have my email account. The attacker could give them their info & have all my funds. There isn't anything Poloniex has to verify that information against, so why would I give all my info? Shady stuff.
Buy your ETH, then withdraw - or sell for a profit then withdraw. Don't hold anything valuable on someone else's server
