RE: Bittrex - Update - Probably my Fault.

I'm so sorry this happened to you.
As far as I understand, you can create API Keys that are good for trading only, but revoque the right to withdraws any fund from your bittrex account. Can this kind of keys still be used to steal your coins?