If the cronjobs are being emptied it makes me wonder if there is some kind of malware running. A lot of times malware will empty cronjobs to avoid being detected. It could easily be something else though.
Are the modification times updated every minute or only right after DA makes a modification?