Bankrupt crypto lender Celsius was lax with custody program