EU institution's suspected $133m theft was via ordinary exchange withdrawals, mostly at Kraken Ledger Insights