A rogue developer who retained admin rights after project delivery is the prime suspect in the theft of $50 million in USDC from the crypto payments firm.