The only way for someone to hack your account and steal your btc is if they have your password AND your PIN. It sounds as though you have been phished somehow. Have you ever logged into SR from a page that required your PIN?