perhaps the 500,000 BTC were transferred in from the stolen wallet files obtained via the trojan that's been circulating?  Not sure that makes total sense, but it might explain why someone with 500,000 BTC would have them all in mtgox.