CBL staff confirm whether or not someone is hacking (provided the evidence is strong enough), and they post that evidence on their site. They also look to see when someone reports if they sent it to Nexon or not. If the user who submitted the evidence did not also send it to Nexon, then the CBL staff take the time to do it for them, although their schedules don't allow it immediately so it takes the CBL staff up to several weeks to do so. And even then, Nexon still has to look over it and decide what to do, which can take who knows how long.