CZ crime was not complying with anti laundering US laws, which basically meant he didn't do KYC to keep USA users out. He got 4 months.

SBF stole user funds to basically role play as a billionare.