A thief however can still dispute they never made the charge. "It wasn't me, I have no idea who this Bitcoin hacker guy is, or how he stole my money but I never made these transfers. Please Mr. Bank Customer support person they stole all my money I can't pay the rent unless I get this back".
I would imagine this scenario would only work once per bank account. After that, the bank would be onto the scammer's MO. The 2nd and subsequent claims by a person doing this scam from their own account would be treated with extreme suspicion by their bank. It would have to be a decent amount of money to be worth burning one's own reputation with their bank to try this scam.
Not everything is a grand criminal enterprise. Most crimes are just a crime of opportunity "Oh look I can get a $1200 in free money using a computer. Sweet." I mean lets put this into perspective. Not everyone is Bernie Madoff. Plenty of people have died in muggings gone wrong for a LOT less than $1,200. Think any criminal goes into an armed robbery saying "I am going to kill this guy but the chance of 25 to life is totally worth a iphone, a couple of credit cards and a couple bucks in cash". Nobody is burning their rep with the bank, the bank gives two craps.
I also find it amazing that there are many legitimately 'hacked' bank accounts in Canada. I've been using online banking for years in Canada with no problems. I would think their security would be heavy duty. I know if someone hacked my account and tried to do an Interac e-Transfer out, I'd get a phone call from my bank.
Do you get a phone call on every e-transfer? The point of hacking is to impersonate the genuine user. Any transfer the bank doesn't call you on could be a transfer by someone else using your account fraudulently and you wouldn't know until after the fact. What would you do? Oh yeah call the bank and report that you didn't authorize that transaction. Still you are right most of these types of transactions aren't genuinely compromised accounts, they are the account holder (or cardholder for CC) simply lying. The bank doesn't really care though, it was never their money at risk. Who cares if a merchant takes a hit? You don't honestly think the bank does? They just want to resolve the dispute as quickly and more importantly cheaply as possible.