Exchanges have opened forensic investigations alongside bug bounty schemes, coordinating with law enforcement following a spate of major breaches.