Bittrex's fine could have been much higher, but OFAC determined that its violations were "non-egregious"