Neither. They hacked the webpage and wrote a different address to send money to. Similar to me sending you a letter that I am Oxfam, please send me money.
If only the crypto-currency world had laws and the institution of justice...
I think he means CoinDash themselves could have altered the address and claimed it's a hack - which would make it straightforward theft, not a real hack.
It won't magic anything, the person gets caught and court makes a ruling like every other criminal action. That's like saying that laws can't magic a stolen bag of cash in a getaway car back to it's rightful owner. You're right that it's not magic, it's the justice system. And if they don't have the coins, they have to sell assets or go bankrupt.
If only the crypto-currency world had laws and the institution of justice...