Enforcement actions and penalties both fell sharply as the agency moves toward fraud-only crypto oversight.