How can it happen? It's a delay somewhere along the line - possibly with the coin tumbler, I don't know - but it has happened before and will happen again. Nothing has been compromised and no, the DDoS guy doesn't have his hands on your coin.