Robinhood's crypto-trading subsidiary used to prevent customers from withdrawing the tokens they bought. Though Robinhood Crypto LLC abandoned that policy in 2022, on Wednesday its past practices earned a $3.9 million slap on the wrist from the state of California.