Yes, I imagine that would be counted as stealing, if it wasn't intended.

However, if the bank had spent large amounts of time absolutely promising irreversible transactions, and publicly opened itself to attackers, then - no, that's just an intended operation of the system.