I want to apologize to the community, I discovered how my account was hijacked, and I'm truly sorry for pointing fingers at RuneMate, the method used was pretty hard to predict and is entirely my fault for not being more weary. The only thing I can offer at this time is advice: 2 step authentication is amazing, and using a password that's different from any other site is a great idea. How it was hijacked: I had lent the account to a friend to use for farming dwarf ogres two months ago when I had quit the game. When invention came around, the thousands of hand cannons he had farmed skyrocketed in price and he became a billionaire, (I wasn't around for this) he became extremely egotistical and eventually got kicked out of the clan/friend's chat/discord group for generally just being an asshole. His response was to do as many fucked up things as possible to people who resided in the clan, things including DDOSing members, leaking clan secrets, etc. One of those things was attempting to steal my account and take all the gold off of it. He tried to find the password for my main account by looking at bugabuse's forum dump, found a password that didn't work for my main, but worked for my alt account (since he knew the e-mail login). So he settled for my alt and stole the gold off of it. I discovered what happened when I joined the Discord group again today, and managed to put two and two together. I'm sorry.