looks like someone behind @nijeah tested a negative vesting withdrawal and it worked. Then they verified and performed 2 big withdrawals (powerdowns) which will create a race condition one week (7 days VESTING_PERIOD ).

I don't think it was a scam or an attack -- I would say this is a curious one :-)