Does this have to be reset by admins-only or can moderators also initiate the reset after he address message has been verified?
Mods have no power to do it.
In the past, the recovery process was only done by admins, because it would even take over a year of waiting for one's account to be recovered but later a team was then introduced to manage the account recoveries - You can check this thread for more details:
Cryptios