The thing is, exchanges pool funds and users on exchanges do withdrawals all the time, and sometimes send to these services.

The lack of an auditable cold wallet was a huge red flag. So was their multimillion ether loss (how would they cover that!?!?).

But even with public cold wallets, the public doesn’t know how much crypto or fiat is owed to users.