It is quite obvious that it's a scam. They initially left a loophole for themselves, withdraw money and disappear. It means, they expected to withdraw funds in advance to avoid paying money to that hacker.