Fair point, but I think the context from @corndalorian was it being stolen from the mint rather than an external threat actor. 

I'm still interested to learn more on it all. What's the best resource? Thanks  

 The mint's risk profile is the same as any other custodian.