Heh. You should suggest that to paypal's tech support so we can get a bugfix in faster. They might care a great deal more about you getting your stranded money back than crackers stealing users cash...