The pair stole $16.8 million from customers of three different crypto exchanges, including two in the US.