Is it possible to further clarify the idea of theft without the need to withdraw the balance
Having access to enough funds on an exchange, one can for an example buy a lot of the same shitcoin which has very low volume, then using the other accounts he places buy orders to buy his bags for a lot higher, they can then make buy orders for the same shitcoin on his main account and then using the other accounts he makes a lot of sell orders so he can buy-back those coins for cheap, and then again sell it for a higher price, rinse and repeat.
Since the hacker/attacker can't withdraw funds, all they do is liquate you to their favor, in other words making 100% winning traders and then withdraw the funds from their main account, one might think that a "reputable" exchange like Bittrex should sense such P&D operations going on and lock all accounts involved, but I don't trust any of these crypto exchanges, you are simply paying for the mistake of using a third-party app that has control over your funds, people think that because these apps can't withdraw money directly from their account - then their funds are safe, which is a misconception.
Also, the fact that no more victims showed up, it's safe to assume the app itself was not hacked and it's more likely that your API keys got compromised somehow. If you are lucky enough then bittrex might have blocked the account/accounts who made those trades and your stolen money is still there, but I would give that a 10% at best case scenario, the 90% scenario is that the funds are long gone, Tabtrader will refuse to compensate you saying it's your fault for not keeping your credentials safe, Bittrex will say those orders were made by an app which you personally gave it the keys to trade for you, and in the end, it's really your mistake for trusting something like Tabtrader or other platforms when you could have simply used the exchange's app itself.
