Although my other theory that the initial 600 BTC mateo win was already in the bankroll seems to have been disproved. There is now 1600 BTC in the cold wallet, so that amount had to come from somewhere. Not sure what to think of it.
So is this Mateo's deposit address?
https://blockchain.info/address/1A3rRhZHZkxaEUtbCto9cdTXKDxAveVxyG2014-08-06 16:23:02 Mateo deposits 75 BTC, presumably invests it
2014-08-06 18:06:57 Mateo's 75 BTC and a bunch of other deposits are shuffled off to the cold wallet
2014-09-17 13:20:22 Mateo deposits 650 BTC
2014-09-17 23:42:05 600 of that is moved to the cold wallet
The
650 BTC deposit came from 3 separate inputs, each of which appears to come from a withdrawal from DB:
23c00ec6 takes 1626 btc from cold wallet 2014-09-08 15:36:11
b32436a4 pays someone 165 btc 2014-09-08 15:57:46
a522fff9 pays someone 21 btc 2014-09-08 16:35:00
bbd6d827 pays someone 1 btc 2014-09-08 18:44:04
b2dc009f pays someone 13 btc 2014-09-09 08:59:47
d1320a11 pays Mateo 274.5499 btc - which is the 1st input of the 650 deposit 2014-09-09 15:11:09
22da4081 pays someone 347 btc 2014-09-09 15:11:10
5abe3ae3 pays Mateo 177.3999 btc - which is the 3rd input of the 650 deposit 2014-09-09 15:11:11
906dcda6 pays Mateo 201.47735735 btc - which is the 2nd input of the 650 deposit 2014-09-09 15:11:12I don't know what any of that tells us, other than that the coins Mateo just lost seem to have been withdrawn from DB and redeposited without being used for anything in between.
Edit: I should point out that each of these transactions is a child of the one before it; they form a chain. Each (other than the first) has just one input, so you can follow the chain back from the last to the first.