MtGox could effectively "create" BTC by simply selling more than they actually had. This would of course only work as long as people were actually withdrawing less than MtGox had available to them. Until you attempt to withdraw the BTC from the exchange, you wouldn't necessarily actually know that they in fact exist.