As regulators and users demand stronger protections, crypto exchanges are increasingly being judged by how they respond to hacks, scams, and illicit fund flows.