Unless of course that's exactly what they were doing, but were topping up the hot wallet without realising there was a leak.
If you believe the leaked report, they lost almost 750,000 bitcoins, and now they only have 2000 left.
That means they moved 99.7% of their cold storage into the hot wallet without noticing there was a leak.
Just an everyday mistake...