Bitcoin Depot reported a $3. 6M loss after attackers accessed settlement account credentials, highlighting ongoing off-chain security risks in crypto.