This. Exit strategy all along. Or they were sloppy enough to get monitored accessing the coin wallet and exposing their private keys/passwords.