I have no idea why their BTC are siting in a MtGox account, online. Any and all bitcoin that are not being used for transactions with customers should be squirreled away into a cold wallet immediately.

If they did that, they will only have 40 K USD gone instead of also 40 K BTC gone.