the coins were not lost, but stolen through the transaction malleability bug