Thailand’s Securities and Exchange Commission has formally accused Bitkub Online and two former executives of deliberately misleading regulators about a $50 million cyberattack in 2021. The complaint alleges the exchange hid the true financial impact of a hacking incident for six months, violating key digital asset laws.
Details of the Allegations
Back in May 2021, Bitkub suffered a major breach that resulted in the loss of digital assets worth around 1.7 billion baht, approximately $50 million. Although the company replaced the stolen funds by the end of October that year, the SEC claims Bitkub submitted daily financial reports during those months that falsely showed stable capital levels. Essentially, Bitkub’s filings concealed the $50 million hole on its balance sheet from regulators between May 10 and October 30, 2021.
This conduct is said to breach Section 76 of Thailand’s Emergency Decree on Digital Asset Businesses, which governs licensed crypto operators. The SEC’s criminal complaint was filed in late July 2026 and handed over to the Economic Crime Suppression Division for investigation.
Broader Impact and Regulatory Context
Bitkub dominates Thailand’s crypto market with over 90% share, making its actions significant for retail and institutional investors alike. The exchange has a history of regulatory troubles, including insider trading fines and penalties for manipulating trading volumes. Plans for a $500 million acquisition by Siam Commercial Bank fell through amid ongoing regulatory scrutiny.
With Bitkub aiming for a public listing, this criminal case complicates its prospects. Potential investors and partners will be cautious as the exchange navigates serious legal challenges. The SEC’s aggressive approach signals that Thailand is ready to pursue criminal charges, not just civil penalties, when disclosures fall short.
