Bug or feature. Could it have been a transfer of funds organized to look like a hack?