Even when the exchange detected such violations , it " often failed to take appropriate disciplinary actions " against individuals or firms .