You may also read this :
https://www.theverge.com/platform/amp/2017/9/18/16328172/sms-two-factor-authentication-hack-password-bitcoinCan you also post the bitcoin transaction address? and How did the hacker stole your Bitcoin ? was your bitcoin in an Web Exchange?
Maybe OP said that the hacker bypass his own number, which means the hacker also have the number of OP therefore security codes for log in is also received by the hacker.
I feel sorry for the OP but without enough proof , I will not believe on this claim, unless he also posted transaction address and provide more concrete and verifiable proof.