crypto theft investigation