Hacker News Reader

I'm not sure but I suggest they use some sort of distributed crypto solution to resolve such issues.

I'm guessing any withdrawal that was done while using an exploit to bypass 2FA could be called unauthorized in this case

I guess they know which accounts circumvented their previous 2FA implementation.