One thing that must be considered is the possibility of a malicious account sending to the exchange, and then sending their funds to a different account to power up. Though I would say that in this case, I think all of the users effected were already powering down and leaving, so I think your solution would have worked.