Check out blocknet guys, they have a working decentralized exchange, you can trade between several altcoins and BTC at the monent.
Still in beta, but is working.
It will put an end to this shit.
its almost impossible for us to know. This can very easily be an inside job as it involved multisig, and there is no way the hacker could have both the keys.