This is pathetic:
Please be aware that after this 30-day withdrawal window, we will not be processing any further withdrawal requests.
~
1. First name, Last name (if you are KYC verified)
2. Username (request will be ignored if the username does not exist)
3. Email address (request will be ignored if the email does not match)
4. Refund Amount (approximate balance is acceptable)
5. Wallet address (we will process only in the cryptocurrency you have)
What happened to using account credentials for withdrawals instead of emails? What happened to contacting your customers instead of writing about it months later on a third party forum?
Could it be someone else gained access to the account and is now collecting data on users?