Assuming those transactions you describe constitute "the theft", how on earth could Gox not have noticed their wallets being emptied?