FINMA's January 12, 2026, guidance flagged cyberattacks and inadequate protection of cryptographic private keys as primary operational risks for crypto fund institutions