My account got empty - Liberty Reserve API

[wajaj]

I don't get it.. how did hackers empty my LR account? They did it through API.

12/8/2008 13:07 8966728 U8365133 (Mao Juanmi) – $78.00 $0.00 $0.00 Details Hide details

Merchant Reference:

Memo: Cashout Number: 1000000

12/8/2008 08:20 8951110 U8365133 (Mao Juanmi) – $252.78 $0.00 $0.00 Details Hide details

Merchant Reference:

Memo: Cashout Number: 1000000

So many :S

I have a strong API password and the IP is only allowed from my server to withdraw money because I have withdraw script on my site. And it seems no one has got into my site - which is quite secure. I don't get it!