Bittrex has them. Someone with access to the community321 account turned on the whole theft, and forwarded all nds to Bittrex with memo to return them.

Check the steemd.