Thanks for the analysis!

It doesn't seem suspicious to me. It makes sense.

If I were going to steal coins and knew the target kept between 500 and 2k coins. I'd want to wait to steal until there were 2k coins (if possible) and try to trigger an event to make it fill to 2k (if possible) before stealing to maximize my illicit gains.