Account recovery wasn't used to takeover community321. Whoever compromised community321 determined its private keys. (not that much is changed by the difference)