It is sad to say that your friend's Waves coins will never return unless he knows the hacker personally as the hacker knows where he hid his wallet key. Also, he may have made Crypto transactions in internet cafes or some public computers with a keylogger installed. So charge this to your experience so that it will never happen again.