Thailand SEC files complaint against Bitkub over alleged false disclosures
Thailand's Securities and Exchange Commission (SEC) has filed a criminal complaint against Bitkub Online and two former directors for alleged false disclosures related to a $50 million cyberattack in 2021.
Intelligence analysis by Gemini 2.5 Flash

The Thai SEC accuses Bitkub of failing to accurately report the impact of a May 2021 cyberattack, which resulted in the theft of 16 types of digital assets worth approximately $50 million. Bitkub claims it delayed disclosure to prevent a bank run and that co-founders covered the losses, ensuring no financial harm to customers or the company.
Imagine a big digital piggy bank called Bitkub that got some of its money stolen by a sneaky hacker. Instead of telling everyone right away, Bitkub quickly put the money back so no one would panic. Now, the government's money police are saying Bitkub should have told them about the stolen money much sooner, even though it was replaced, because it looked like nothing had happened on their reports. It's like not telling your parents you broke a vase, even if you glued it back together perfectly.
Analysis
SEC's Allegations of Misrepresentation
Thailand's Securities and Exchange Commission (SEC) has initiated a criminal complaint against Bitkub Online, one of the nation's largest digital asset exchanges, and two of its former directors, Sakolkorn Sakavee and Thaweesap Rawan. The core of the complaint revolves around alleged false disclosures concerning a significant cyberattack that occurred in May 2021. According to the SEC, this incident led to the theft of 16 different types of digital assets, amounting to approximately 1.7 billion baht, or $50 million.
The regulator contends that while Bitkub eventually replaced the stolen assets by October 31, 2021, the exchange failed to accurately reflect the financial impact of this incident in its daily net liquid capital reports. Specifically, reports submitted between May 10 and October 30, 2021, allegedly did not show the substantial reduction in assets that should have followed such a large-scale theft. The SEC argues that this omission created a misleading impression that customer assets remained secure and that the exchange had not incurred losses, thereby violating multiple provisions of Thailand's digital asset regulations.
Bitkub's Defense and Remedial Actions
Bitkub has publicly disputed the SEC's allegations, clarifying that the case stems from disclosure decisions made in the aftermath of the 2021 cyberattack, rather than any fraudulent intent. The exchange explained its rationale for delaying the disclosure of the wallet compromise, stating it was a strategic decision aimed at preventing a potential 'bank run' by customers while the company worked to address the loss of the stolen assets. This proactive measure, Bitkub asserts, was crucial for maintaining market stability and customer confidence during a critical period.
Furthermore, Bitkub emphasized that its co-founders took direct action to mitigate the financial fallout by purchasing equivalent digital assets to fully cover the stolen funds. This intervention, according to the company, ensured that neither Bitkub nor its customers suffered any financial losses from the cyberattack. The exchange also highlighted its subsequent commitment to strengthening its operational integrity, stating that it has since significantly enhanced its governance, compliance frameworks, and security systems to prevent similar incidents and improve its reporting mechanisms.
Implications for Thailand's Crypto Landscape
This criminal complaint against Bitkub arrives at a pivotal moment for the exchange, as its parent company is reportedly considering a potential initial public offering (IPO), including a possible listing in Hong Kong. The SEC's action places renewed and intense scrutiny on the transparency and governance practices of one of Thailand's most prominent crypto businesses. Such regulatory challenges can significantly impact investor sentiment and the viability of future public market endeavors, potentially delaying or even jeopardizing Bitkub's IPO plans.
Beyond Bitkub, the case sends a strong signal across Thailand's burgeoning digital asset industry regarding the importance of stringent regulatory compliance and transparent reporting, especially in the face of security breaches. It underscores the Thai SEC's commitment to enforcing its digital asset regulations and protecting investors. The outcome of this investigation and subsequent legal proceedings will likely set a precedent for how cyberattacks and financial disclosures are handled by crypto exchanges in Thailand, influencing future regulatory frameworks and fostering either greater trust or increased caution within the local crypto ecosystem.
Key points
- Thailand's SEC filed a criminal complaint against Bitkub and two former directors over alleged false disclosures.
- The complaint relates to a May 2021 cyberattack where $50 million in digital assets were stolen.
- The SEC alleges Bitkub failed to accurately reflect the incident's impact in its net liquid capital reports.
- Bitkub claims it delayed disclosure to prevent a 'bank run' and that co-founders covered the stolen funds.
- The case comes as Bitkub's parent company considers a potential initial public offering (IPO).
This regulatory action could lead to stronger compliance and transparency standards across the Thai crypto sector, ultimately fostering greater investor confidence in digital asset exchanges. Bitkub's stated efforts to enhance governance and security post-incident could also set a higher benchmark for other platforms, improving overall market integrity.
The criminal complaint could severely impact Bitkub's reputation and its plans for a public listing, potentially deterring foreign investment and slowing the growth of Thailand's crypto market. It also highlights ongoing regulatory risks for digital asset exchanges operating in evolving legal environments, which could lead to stricter, more burdensome regulations.



