The only thread I've seen about someone with a token getting hacked was when the token was deactivated and it was hacked in the mean time. I've never seen a thread where someone who had an active token got hacked.