The agency outlined three attack vectors, citing the $1.3 billion in digital assets stolen in Q1 2022.