I want people to understand the accusation, and observed about the time, hour and minutes, that was all the time posted is in bold letters.
From the time

01:14:25 PM - He wants me a refund, gave his refund address (1CfJwaNkox1ChX31ig8AzjkCfkKwpajA3d)
01:18:45 PM - And the time that the password has changed(seclog)
01:28:30 PM  - And after that time and even the password was changed he can still reply me mentioning the address again given at 01:14:25 PM, so it seems that he still the owner of this wallet and that account so I'm convinced that I have to refund him(Which is my fault).
01:39:49 PM - We still have a convo an this it was his last reply
01:40:53 PM - I refunded him txid above.
01:50:43 PM - This new user lysoss PM'ed me that his main account was hacked

But if you will view the seclog for the time difference. You will say that there's no hacked happened coz at the time before the password changed, he posted an address, and after the password changed, he replied me again with the same address.

Now, this lysoss want me to refund the BTC to him coz he's saying that his the real owner, while I refunded the amount already to lyso from the address he gave.

Now if the community will say that it was my fault, if there's a hack happened, and if this lysoss was saying the truth after I explained everything that happened, then I can go refund else tag this accounts.