For at least one of the exchanges, we have David’s personal confirmation of a theft:
Check out the Dev Forum