Requiring emails is just BS. Exchange wallets is easily recognizable, funds could be sent back to the address they came from.
Messages about this in refund channel was DELETED on the fly.
This was an inside job, then they just made up a lot of crap to keep people busy in order to avoid jail.
I don't think Nayiem did it, but also seem he don't understand blockchains very well.
The issue with sending funds back to the wallet where it came from is that some users have deposited funds from an exchange.
I'm not sure if this is something that people want.
Deposit emails don't tell if funds are deposited from an exchange either, you could have set up a simple form asking for deposit tx and a option field if it was from personal wallet or exchange. Then you could check personal tx, subtract withdraws from deposits and refund based on this.
Then you could ask for further proof for deposits from exchange.
I've been in touch with the hosting provider. I can guarantee you that it was not an inside job. Also by looking at the living circumstances from the lead developer of Altilly, I can tell that this wasn't planned.
The team didn't consist of only you and lead dev before this happened..