The notorious cybercrime group used Ethereum-based Railgun to anonymize their movements, but exchanges froze some funds