I refuse to think that the coins were taken from a bot, given the fact that the replaced address took place only after like 45 seconds which is very very quick to crack and broadcast to the network.
But what i think that 0.66 BTC were taken by someone unknown since they transacted like 10 mins after
it could be that the winner is the creator himself.
45 seconds isn't very very quick in my opinion, instantly or less than a second is.
Some high end PCs and servers are capable of doing so as soon as the public key is known.
Creator must be a sadistic sob if he just pulled the funds as soon as someone finds the key lol
Also, can we really call it theft if something is available publicly?
I mean someone just took advantage of someone else's efforts to snatch the reward, ethically it's not acceptable but it is what it is

They should have shared a bit of that reward with the original transaction creator but no, they made a mocking message to the key finder and us all.