At first seeing your case, I thought the player has valid point but upon reading his replies and with his attitude, I really believe that he is just using the hack possibility as an excuse to recover his loss because he was too impatient to withdraw his balance. You processed the first 20K withdrawal so it means that you are willing to pay the player. Too bad for him for not setting 2FA while his account has a huge balance in there. He is very clever on coming up to an excuse that he made on his thread but his attitude show what his true color.
All good for me.