So I contacted the most likely scam artists support people at Waves and asked why that happened. They sent the usual bulxxxt reasons it could possibly happen and I got the horrible feeling that the whole thing is a scam and there was no hacker getting into my account info.
Instead the hackers were inside people, most likely the creepy guy who replied to all my messages within a minute, highly unusual for any busy real crypto exchange.
STAY AWAY FROM WAVES IT'S A DEFINITE SCAM AND RUN BY THE WAVES PEOPLE THEMSELVES. THEY SHOULD BE LOCKED UP BY TRUMP!!!!!
Waves is not the scam. They are an easy to use DEX and have verified and unverified assets. LPOS also is a great concept.
They are also one of the easiest platforms to make asset tokens on. I know of many valid and useful applications of asset tokens on there.
Unverified bitcoin and ethereum (and other) tokens are a known scam on the waves platform. These scams are run by scammers and not waves.
Anybody can create bitcoin token on the platform - the fraud occurs when the person who made the asset refuses to exchange them back for bitcoin.
Just like with USDT. Tethers are exchanged for US$. The fraud occurs if they refuse to exchange them back.
https://modernconsensus.com/cryptocurrencies/bitcoin/bitfinex-tether-investigation/