very well explained by seek3r.
especially since there is now also the refund pool and this should then be used exclusively for other victims (if the proof of ownership of the cards are available).
at that time this pool did not exist and i tried to keep the damage and also the emotions of the respective user as low as possible