The GIOC uses open-source tools, subpoenas and blockchain analysis to trace stolen funds