First paragraph, same exact issue I had, they hacked my account, bypassed security and stole my gold.
And that’s part of the issue here, I didn’t get anything, no auth ping, no SMS, nothing to tell me something had happened. At least when researching this issue you find other companies have better security in place where if they detect any unusual account activity they will suspend your account and stop ANYONE from having access until it can be recovered.
Well go check that link I just found and go tell the community council member they are also wrong.
Even if they did, when I tried to log back into my own account after a password reset, multiple times, and when I just for lols tried to login using incognito it pinged my auth. Even if you have 2 or more phones with an auth, it still should ping them, every time I tried it pinged me, every, single, time.
If someone else did have my password and a duplicated auth, it would still have pinged me also, there is a way to log in with just the code, but there is no way to log in without ever being pinged.