"Hive" isn't a person. A person moved the stolen funds

The only person that could move the stolen funds had to have the account keys

How would all of Hive get account keys to an account managed by anonymous steem witnesses?

Blaming Hive is fun, but complete nonsense. A steem witness either did this, or failed at the fundamental basics of crypto security