Tell your friend  to withdraw the rest of his funds to a safer a wallet. Unfortunately  if it's  a personal wallet,  then the funds would be hard to retrieve, even  with the exchanges  I doubt, once the transactions has been broadcasted  and confirmed  on the blockchain, it would  be very difficult  to retrieve  the funds.