Unauthorized charges made on my account, now my account is locked. WTF GGG

Someone managed to charge 1000 coins to my account, very obviously not me as the paypal confirmations I got were from Taiwan. Paypal immediately refunded my money but now my account is locked. Wtf is happening here... I have 2FA on everything and I got no alerts before the 3 charges happened. Is there a vulnerability in the client or something?