It's a good move that they're planning to repay the amount to 260,000 users. The question is why would an exchange that has millions going out and coming in would have such lacklustre security. It's the responsibility of each and every exchange to have state of the art security rather than crying foul after a hack has hapenned.

This is not the first time an exchange has been hacked and they haven't learnt a lesson from that. It won't be the last time this happens till the time these exchanges learn a lesson.