I've not watched this whole scenario for awhile, but Gox stated publicly they had a cold wallet with an average of 98% of their total Bitcoin holdings in it. How can someone have stolen these coins? Even if they had a hacker who stole coins from within the business itself (Karpeles mentioned in one interview that one bit of advice he would give other Bitcoin companies would be hiring full-time security guards) how can they have stolen any of the coins in the cold wallet? And if the paper wallets were stolen, it would seem there would be some sort of security and/or a limited number of people with access to the coins making it easy to determine who the criminal was.
Last year Gregory Maxwell gives a good explanation:
http://sourceforge.net/p/bitcoin/mailman/message/31958583/But it need not have to been this way. Nobody knows. And from the people who really need to know no one tells us something.
