The issue has been resolved.

We noticed it being fairly easy to see someone's bot token if you could login to their account. For user safety we have shutdown everything and are working on patching this issue.