https://www.sec.gov/news/press-release/2018-185  - this looks more significant - apparently also exchange operators can be charged if they let people trade unregistered security tokens .