Penalties Loom for Crypto Firms Enabling Ransomware Attacks