The correct analogy is if a bank is used to facilitate wire fraud, and they absolutely do have to reverse fraudulent payments, even if they're just a middle-man that unknowingly facilitated the fraud, even if they did their due diligence.

“But crypto!” is irrelevant; don't engage in providing high-risk services without looking into what the risks actually are and who is legally responsible for absorbing them.