Somebody hacked the wallets and stole steem. Steemit just refund the coins but thief keep the stolen steem. They know who that was but they never told steemians how much was taken and who did it. But as you said, it must be on the chain. Find it.