The company hired a hedge fund manager without notifying authorities and then traded crypto with no risk framework in place.