The law, which passed unanimously, extends liability beyond crypto ATM operators to businesses hosting the machines.