What happens here is that the operation 1.11.6737614
uses a override_transfer to send 5000 PEERPLAYS from "flat6" to "c21e6".
That happened on 2016-12-23 13:30:33+00:00 (block #12482277).
override_transfer operations have to be signed by the issuer of of PEERPLAYS (assuming PBSA)
Also, the account has been whitelisted and unwhitelisted before and after the override transfer.
The whitelisting happend onto and off from the account whitelist of the "freedom-ledger" account.
The "freedom-ledger" account is the whitelisting authority for the PEERPLAYS asset.
The "flat6" seems to have traded quite some PEERPLAYS before that happend and also traded STEEM *after* the incident.
There was also a transfer of 30 BTS to freedom-ledger.
If that is fraudulent or not is difficult to tell, but certainly whoever holds the keys for freedom-ledger has signed those
transactions.