Skip to main content

Thailand SEC Files Complaint Against Bitkub Over 2021 Hack Reporting



Thailand’s crypto market is facing renewed regulatory pressure after the country’s Securities and Exchange Commission (SEC) filed a criminal complaint against Bitkub and two former directors over allegations of inaccurate disclosures tied to a 2021 cyberattack.


In a report released Thursday, the Thai SEC said it has brought the case against Bitkub Online along with former executives Sakolkorn Sakavee and Thaweesap Rawan, accusing them of submitting company reports that misrepresented the impact of the hack during the period under investigation. The matter comes at a sensitive time for Bitkub, as its parent company has been weighing a potential public listing—an issue that typically brings stricter expectations around transparency and governance.



Key takeaways



  • The Thai SEC filed a criminal complaint against Bitkub Online and two former directors for alleged false reporting connected to a May 2021 cyberattack.

  • The SEC claims Bitkub failed to reflect the full impact of the theft in daily net liquid capital reports between May 10 and Oct. 30, 2021.

  • The regulator estimates the stolen crypto assets at 16 types worth about 1.7 billion baht (around $50 million).

  • Bitkub disputes the SEC’s allegations, saying disclosures were delayed to avoid a bank-run and that it later covered the stolen assets with equivalent holdings.

  • The case will proceed through Thailand’s investigation and possible prosecution process, while Bitkub’s broader corporate plans remain in focus.



SEC alleges Bitkub understated losses in capital reporting


At the center of the complaint is the SEC’s contention that Bitkub did not accurately disclose the consequences of the May 2021 hack. According to the SEC, the incident led to the theft of 16 categories of digital assets from the exchange, with a stated value of approximately 1.7 billion baht (about $50 million).


The SEC further alleged that Bitkub replaced the stolen assets by Oct. 31, 2021. However, it said the exchange’s daily net liquid capital reports did not show a significant reduction in assets during the period from May 10 through Oct. 30, 2021.


In the SEC’s view, this reporting gap could have created the impression that customer assets remained effectively unchanged and that the exchange had not suffered meaningful losses from the attack.


The complaint accuses Bitkub and the former directors of violating multiple provisions of Thailand’s digital asset regulations in connection with the alleged false disclosures. The SEC said the matter will move forward through investigation and, if warranted, prosecution and court proceedings.



Bitkub counters: disclosure timing aimed to prevent a bank run


Bitkub rejected the SEC’s claims in a post on X, describing the complaint as stemming from disclosure decisions made after the May 2021 cyberattack rather than from fraudulent intent.


The exchange said it delayed disclosing the wallet compromise to help prevent a bank run while it worked to address the loss. Bitkub also stated that its co-founders later purchased digital assets equivalent to the stolen funds, arguing that neither the company nor its customers ultimately experienced financial losses.


Alongside the rebuttal, Bitkub said it has since strengthened governance, compliance, and security systems. The exchange did not indicate that it will change or reverse its position, but its response frames the controversy as a risk-management dispute over timing and communication rather than a concealment of ongoing damage.



Why this case matters as Bitkub eyes a listing


Beyond the immediate legal process, the SEC complaint arrives as Bitkub’s ownership group considers a potential public listing. In December 2025, Bitkub confirmed to Cointelegraph that it was considering an initial public offering, with a potential listing in Hong Kong.


That context matters because public-market pathways generally increase pressure on disclosure quality, internal controls, and auditability—particularly for regulated exchanges. Even if Bitkub’s parent company proceeds with fundraising or an IPO plan, regulatory scrutiny of past reporting practices can influence investor sentiment, due-diligence findings, and the scrutiny applied by prospective underwriters or listing authorities.


At the same time, the case highlights an underlying tension that has appeared in crypto regulation across multiple jurisdictions: whether a firm’s attempts to stabilize conditions after an incident justify delayed or incomplete public disclosures, and what regulators consider “accurate” reporting in the interim.



Bitkub’s scale in Thailand and what to watch next


Founded in 2018, Bitkub has become one of Thailand’s best-known crypto exchanges. According to CoinGecko, it ranks first among Thai exchanges by trust score and had about $712 million in daily trading volume at the time of publication for the referenced data.


For market participants, the SEC complaint may affect how counterparties and users evaluate compliance and reporting standards—especially for an exchange that already holds significant market share. While Bitkub disputes the allegations, the next phase will be driven by Thailand’s investigation process and any subsequent prosecution decisions.


Readers should watch for whether regulators can show that the disputed reports materially misled stakeholders, how Bitkub substantiates its claim of later compensation, and whether additional documents surface regarding the timeline of disclosures around the May 2021 hack. As the legal process develops—and with IPO plans still part of the background—clarity around internal controls and incident communications could become a defining factor in how Bitkub is judged by both regulators and investors.



https://www.cryptobreaking.com/thailand-sec-files-complaint-against/?utm_source=blogger%20&utm_medium=social_auto&utm_campaign=Thailand%20SEC%20Files%20Complaint%20Against%20Bitkub%20Over%202021%20Hack%20Reporting%20

Comments

Popular posts from this blog

Mastercard Launches AI Agent Pay System With Ripple and Solana Help

Mastercard has launched Agent Pay for Machines, a payments system built for autonomous software agents. The service allows AI agents to send and receive payments without direct human action. It brings Ripple, Coinbase, and Solana Foundation into Mastercard’s push for automated digital commerce. Ripple Brings XRPL and RLUSD to Mastercard’s Agent Pay System Mastercard introduced Agent Pay for Machines on June 10 as a tool for machine-led payments. The system targets high-volume and low-value transactions across business and consumer use cases. It also supports automated settlement between software agents and connected machines. Ripple will support the system through the XRP Ledger and its RLUSD stablecoin. The company said that settlement will become more important as automated commerce grows. It also sees blockchain rails as useful for fast and rule-based payments. RippleX senior vice president Markus Infanger said XRPL and RLUSD support enterprise-grade agent payments. He said the tool...

Coinbase's x402 launches AI agents app store for payments

Coinbase-backed x402 has unveiled Agentic.market, a dedicated marketplace aimed at increasing the usefulness of AI agents by aggregating thousands of apps and services that agents can access without any API keys. The rollout positions the platform as a central hub for agents to discover, evaluate, and deploy capabilities across a standardized payments layer. Coinbase product lead Nick Prince described Agentic.market in a video posted on X as a storefront for discovering, comparing, and using x402 services. The marketplace is designed to give both humans and their AI agents access to a wide range of tools—from data feeds to consumer apps—without the friction of managing API credentials. A storefront for discovering, comparing, and using x402 services. Thousands of services. Zero API keys. Powered by x402. Prince added that the market offers a web interface for humans to browse and assess services, alongside a programming layer that lets AI agents autonomously search, filter, and integra...

Solana Policy Institute Calls on SEC to Safeguard DeFi Developers from Overly Strict Regulations

US Crypto Policy Innovation: Advocates Push for Clear Regulations and Developer Protections The Solana Policy Institute has urged the U.S. Securities and Exchange Commission (SEC) to differentiate between centralized crypto exchanges and non-custodial decentralized finance (DeFi) software. The nonprofit emphasizes that developers creating and publishing non-custodial code should not be classified as intermediaries, advocating for balanced regulation that fosters innovation without compromising security or legality. Key Takeaways Advocates call for regulatory clarity distinguishing between non-custodial DeFi protocols and centralized exchanges. The Institute argues that applying traditional securities laws to DeFi code risks stifling innovation and pushing activity offshore. Authorities are encouraged to adopt a custody-and-control-based framework to clarify legal liabilities. Legislation proposals aim to shield developers from legal liabilities associated with blockchain code and activ...