AFAIK v3 and v5 serve different product line so if they were mining bitcoins it was certainly on a dedicated server, so v3 it is !
And I don't think the manager was broken, my bet is the client got his email hacked or his machine keylogged. As OVH is the biggest European hoster if the manager was hacked there would be way more evidences than a few BC theft.