SEC Charges Crypto Firm for Custody Failures