What happened was people trusted their private keys to a scumbag imho. Most ponzi operators go through great lengths to hide their activities.  As mentioned earlier mixers and trading for alts and constant new wallets to mixers again could prove daunting to trace.