I am quite surprised they were even able to get my password for the exchange.

That's the real mystery in your story. One of the devices you use to login to Cryptopia is probably compromised... I would be very careful about using them until you figure out the hack...