A regulatory review earlier this year found weaknesses in some exchanges’ cyber defenses, prompting the SFC to set new custody standards for licensed platforms.