"Cryptocat" is a friend of mine, and emailed me to tell me he'd been hacked. I saw the account on and selling stuff (just heavy metal plates), and told people not to buy, and that Crypto had been hacked, after sending a few tells and not getting any response other than "who are you?".
I found out, mostly through talking to this second crypto, and then to the first, that my friend obtained the account from someone legally, although not tos-friendly, and that this person, the fellow to login, was the original owner coming back for his account.
I told him I'd do the decent thing and take back the things I said once I found some truth.
Done.