I mean, why not both? There's an entertaining subgenre of police blotter reports where people report their illegal drugs stolen. If people report crypto assets stolen (which they very rarely do), maybe have a look at how they acquired them and whether it was reported to the revenue first.