0 sats \ 0 replies \ @cryptocoin 21 Jan 2023 \ parent \ on: Multiple Linux Backdoors Discovered Targeting Bitcoin Core Developer -LukeDashJr bitcoin
There was the November attack on his server at his hosting facility. That's what the article is describing.
Then there was the December 31st/Jan 1st discovery that funds had just moved. These two events are likely related, but the funds stolen were not kept on that exploited server.
This article only addresses the server compromise, not how the funds kept on his workstation/device(s) [at his home] were accessed.