It seems Bitfinex was conned into buying false security from BitGo but they should have known better than moving from a cold storage setup.