The New York Department of Financial Services found that crypto firms blocked the Twitter hackers' crypto addresses within 40 minutes.