I don't think a bad actor could have actually withdrawn large amounts from Coinbase with the checks/balances they have in place. Perhaps they could have manipulated the price of another asset via trading thought like the Binance "hack" that happened recently.