His father is a dev and managed the keys. Used an online password manager that was hacked I guess. Not sure which hot wallet was used.
Very sketchy story.
Many like this would be better off using a service like Swan or even Coinbase to be honest. People blow themselves up overthinking their security designs.