What is the best way to catch a hacker?

Individual hackers are rare in JMS; usually it's a systematic attempt by Chinese goldfarmers. There's nothing we could do to hasten the dev team from closing whatever exploits there are. Even if you ban accounts, they can just as easily come back using a proxy (which is how they access JMS).