It's easy to think they just thought it was negligence on the user side. Since if it was on their side, a ton of people would be affected and the attacker would be draining like they are now. Which makes me think there are a handful of cases like this where a normal user actually had entropy clash with an existing user, saw the pre existing balance, swept and never spoke a word about it to anyone.