The worst thing is I got no email about logging in or password change or anything, so the guy was very clever. Now I have 2fa (also very stupid of me not to have before so a warning to all you guys to please set this!!).
That is very unfortunate, and sadly common on the internet. To set 2fa is a must when holding and investing any sums of money at online platforms. That is a basic and efficient security measure at same time which prevent most, if not every hack attempts against the user's personal account.
By this time everyone here should have already set up 2fa on their accounts...