I thought of emailing the exchange he's registered on and providing these details directly to them.
In one exchange, this guy has his account on direct deals with agencies.
Dude... you gave him access to your account yourself

You can keep wasting time talking with that exchange and make yourself a bit bigger circus clown than you already are.
Title is wrong, your account was not hacked and it's worthless, so I don't trust a single word your wrote about this case.