This may just be mudslinging or being purposely vague in this disclosure. The whistleblower doing disclosure only appears to state that cash can be deposited directly while also claiming a theft, similar to one Arkeyo alleges in legal claims going back almost a decade across jurisdictions, allows for comprise when taken together. An example attack from this may be that the coin-counter after entering your account number and depositing coins, seeing the total account balance after is the “compromise” being disclosed (i.e. very small). Source