Seems like a good response and well resolved. Good job!
Wouldn't it be safer/better, though, to implement a universal delay in trading ay assets out of the SLs/admin control and to somewhere unrecoverable? sort of like a 48 hour delay on transferring out cards but not transferring in. It don't think that would be terribly burdensome on players to wait 2 days to xfer assets to a another dex or something, and if something happened in the future and it was reported in time, devs should be able to track the card within their domain of control and recover it.