>they had prepared in advance with some inside knowledge of Binance architecture

That is a safe bet 92% of the time, but they rushed getting the stolen coins into a tumbler service. The kind of people that do business in bitcoin, are not the class of folks you want finding these thieves first.

Yet, picking politically attractive proxy-scapegoats is a classic pro move. =3