The SEC found that the exchange frequently failed to take disciplinary action despite detecting violations.
Even when the exchange detected such violations , it " often failed to take appropriate disciplinary actions " against individuals or firms .