$20M crypto theft