Kraken agreed to pay a fine after the SEC discovered that it had poor oversight of its customers' geolocation, allowing Iranians to avoid US sanctions.