Nothing to notice, it was run like a bank, your balance was still shown but the bank no longer had the funds to pay out. All Ok unless everyone tries to withdraw, a bank run.

When the hacker came back and hit the API, then customers saw their balance disappear, causing the said bank run that led to him having to admit what happened.