One thing is clear. There's a lot of information yet to come. They've indicated that it's "highly probably" the coins were lots due to the TX Mal bug which seems to be the least likely hypothesis in the eyes of the community.

I suspect they're still analyzing their logs to find the full story themselves.