The exchange initially denied reports from crypto sleuths suggesting that it had laundered digital assets for the Lazarus Group, but admitted to processing an “insignificant portion of funds” from the February hack