In August, a report suggested the regulator had found “unsatisfactory practices” at some exchanges. In particular, it stated that “some of the crypto firms are overly reliant on a handful of executives to oversee the custody of client assets, while others aren’t properly guarding against cybercrime risks.”