Got it. Normally, you/he would have to sign a message from a staked address and send it to one of the admins.

However, I've checked your/yours friend post history and I couldn't find a single mention of a Bitcoin address that you own. So recovering it may be way harder than the normal.