If the server the masternode was hosted on was compromised and the 1k in the hot wallet, then there'd be no moving the node.