My coinbase got hacked today. I got a message on my phone saying that my password had changed. I attempted to follow instructions to stop it, but by the time I had, it was too late and the theif emptied out my hot wallet. The only saving grace was that coinbase has vaults which give 48 hour delay. I wish that I would have transferred more coins to the vault as they were protected. Coinbase has some serious vulnerabilities, but whoever the thief was was able to login from my IP and was able to login to my email despite the fact that I had just changed my password. Be careful out there. Cold wallet your coins.
Sorry to hear bad news like this. I don't understand why you didn't enable 2-factor authentication? You should enable on any website that supports it for example (Amazon, NiceHash, LocalBitcoins, Gmail and all exchanges that support 2FA) Ebay don't have 2FA but if they do I will enable too.
Next time you will know, it's not safe to keep BTC or ETH or any other crypto on exchange, one day even most trusted exchange can be in troubles (like BTC-e)
We all make mistakes, and it doesn't matter if you the newbie or experienced user. I was in hurry and transferred eth to another exchange into other Token address, theoretically, I lost my Etereum but I contacted this exchange and after mentioning I will leave negative feedback on forum and Trust Review website I had another reply from Tech support that they will check for me and get them back, exchange fixed this for me, even they state Tokes send to wrong address are lost.