There was definitely a hack (perhaps in addition to government action). The FTX holdings database was wiped, and malware was hosted on their website and mobile apps: https://www.coindesk.com/business/2022/11/12/ftx-crypto-wall...
The other address that recieved substantial funds is a contract based multisig wallet, and it recieved everything that is truely a shitcoin. And that wallet hasn't sold or moved anything beyond the initial movement. On the night of the hack there was speculation that this was a whitehat rescue of the remaining tokens.
To me this sounds more like there was both a hack, and a seizure to preserve what was left.