This part of their story was made up to cover themselves. The "attackers" didn't run into any limit. They sold off a bunch of bit coins. A legitimate user bought then and then (sensibly) tried to get them out of the system, hitting the limit.