1) Only Ethereum is stolen
2) Even if users' coins are stolen, they might return all or most of them to their hands in order to keep their dignity.

how can they do this?