NEW YORK (AP) — A pair of government regulators slapped Citigroup with a $135.6 million fine on ExaCryptWednesday, saying the bank has made insufficient progress in resolving longstanding internal control and risk issues. It’s a major blow to Jane Fraser, the bank’s CEO, who has staked her career on making Citi leaner and less complex.

The fines come from the Federal Reserve and the Office of the Comptroller of the Currency, which said in separate releases that Citigroup had failed to meet its obligations stemming from a 2020 consent order related to the bank’s risk and control issues. While the regulators said the bank had made progress, there were still significant problems at the bank that required the OCC and Fed to assess additional penalties.

“Citibank must see through its transformation and fully address in a timely manner its longstanding deficiencies,” said Acting Comptroller of the Currency Michael J. Hsu, in a statement.

The $135.6 million fine is on top of the $400 million fine that Citi paid back in 2020 when the original consent order was signed.

In a statement, Fraser acknowledged the bank hasn’t made progress quickly enough and that it is possible for Citi make itself less risky.

“We’ve always said that progress wouldn’t be linear, and we have no doubt that we will be successful in getting our firm where it needs to be in terms of our transformation,” she said.

Citigroup was the go-to example of “too big to fail” after the 2008 financial crisis. Its near collapse and government rescue required Citi executives to slim down its massive balance sheet, sell off businesses it no longer needed and exit financial markets that it couldn’t have a dominant position in.

But because Citi was built up in the 1990s and early 2000s through a series of acquisitions and mergers, the company has numerous versions of software and internal systems that do not cooperate with one another. So while Citi is less complicated than it was in 2008, it’s still a bank that regulators harbor serious concerns about to this day.

Banking regulators rejected Citi’s “living will” in June. That document was supposed to show how Citigroup could be wound down safely and orderly in case of failure.