Six exchanges — including Binance, Luno, Coinbase and Kraken — will have to share user data to help trace $10.7 million in stolen funds.