This is why I also have 2FA disabled on coin exchanges. A friend, just a couple of days ago, broke his phone and can no longer access the coins held on an exchange...I did warn him.