The user sent outdated token which he did not burn.
I didn't know this can happen. That's an expensive lesson in handling Ethereum tokens! I've added some red to the scam-account too.
I can only see it as another reason to stay away from tokens created out of thin air.
Tokens were reissued and everyone who was holding old hydro tokens have received new hydro tokens. All holders got instructions how to burn old tokens, unfortunately, this scammer took advantage of whole situation, didn't burn tokens and they scammed mdayonliner.
It is indeed, from now on I will ask the borrower to send any token directly to the exchanges (either to me or to the escrow), no exception. My original thread actually says that token has to be sent to the exchanges but at the end I wanted to be more flexible for this scammer. Little know I had the idea that this would cost me a lot.
I don't think it is good solution to hold escrowed funds or collateral in exchange. You should have done more research about tokens before taking them as collateral(or before sending money to scammer), well, we all learn on our own mistakes, I hope you won't do the same mistake again.
I would suggest everyone who is in token handing business (especially escrow, lending, buying from third party) to do the same.
It is important to look at smart contract address and to see if it is correct one, and, of course, to read yellow messages with important info.
On side noteICOethics has PM'd me something interesting few days ago, I hope they won't mind me posting it here, apparently these guys, whoever they are -
https://etherscan.io/address/0xf24246e0d5399ea85dbdadcfdbc9e8f14490db58#tokentxns - are issuing fake tokens, giving them symbols of true tokens and after that they simple send tokens to etherdelta. Whoever buys them will buy fake worthless tokens.
So, to repeat again, it is very important to double check smart contract.