Basically, the private key of kucoin got stolen due to the phishing. There was no problem in the security that has already used by kucoin as it's clearly stated by the kucoin itself if they have already disabled all of system when the hackers were moving the amounts into the new wallets.

The problem is how can the kucoin be a victim for the phishing link? Im feeling curious about this.