It appears email withdrawal notifications were turned off automatically when I switched to 2FA? I didn't realize. That's why I said they should not be turning off a layer of protection in favor of another layer, multiple layers of protection is far better. To be clear my email account was not hacked, I could have stopped this is the notifications were on. Thinking about it the attackers could have disabled this feature when they gained access to my Bittrex account.