They did exactly this on Hansa. They also used this same method to break the multisig transactions that hansa used to direction bitcoins directly to LE wallets (The dutch say 2million euros worth)