What have we learned 9 years after the Mt. Gox hack?