it's also not clear yet that the 250K BTC on mtgox were actually "real".  plausible (likely?) that they were created out of whole cloth in the mtgox database by the attackers (UPDATE account_table SET btc_balance=500000 WHERE USER_ID=schmucko)