. If this happens again I think the ban should be permanent.
I dont think he was hacked *again*
From what I can tell, the OP was hacked in 2018 (or possibly 2017), the hackers posted malware links, not all the malware links were deleted, the OP was banned in 2018, was unbanned later that year, and was banned again just now because a moderator saw the malware links from when he was previously hacked.
Yes, I get that. But how can even the first (and most likely only) hack be proven?
The best-case scenario is he wasn't responsible to neither secure his account or delete the hacker's posts. Wort-case scenario is the account was never hacked.
Presumably whoever unbanned the OPs account was able to reasonably conclude his account was hacked.
I would presume that most hackers dont hack (or try to hack) just one account, so if the IP address and browser fingerprint is consistent with that of other known hacked accounts that are clearly different from the OPs information, you could reasonably say he was hacked.
The IP/browser fingerprint would need to be both different from the OP and the same as a hacker.