Thailand’s Securities and Exchange Commission (SEC) has initiated criminal proceedings against Bitkub Online, one of the nation’s largest cryptocurrency exchanges, and two of its former directors. The charges stem from allegations that the exchange deliberately obscured the impact of a significant 2021 cyber theft, involving approximately 1.7 billion baht (equivalent to roughly $53 million) in customer assets, by submitting falsified daily net-capital reports. This deliberate omission, which lasted for a period of five months, was reportedly undertaken to prevent a potential bank run and maintain customer confidence during a critical period of asset replacement.

The criminal complaint, filed on July 23, 2026, with Thailand’s Economic Crime Suppression Division, specifically names Sakolkorn Sakavee and Thaweesap Rawan. The SEC contends that these individuals, as directors of Bitkub at the time, bore responsibility for the accuracy of the daily Form DA 1 reports. The regulator alleges that Bitkub provided false statements to authorities, and that the two former directors were complicit in making false entries within official company documentation.

The incident that triggered the regulatory action occurred in May 2021, when a sophisticated cyberattack led to the unauthorized withdrawal of customer assets across 16 different cryptocurrencies from the Bitkub platform. A thorough review by the SEC revealed that Bitkub’s Form DA 1 reports submitted between May 10 and October 30, 2021, failed to reflect any material change in the exchange’s asset balance following the theft. This lack of transparency, according to the SEC, constituted a clear instance of false reporting, undermining the regulatory oversight mechanisms designed to protect investors and market stability.

Following this period of concealment, the SEC noted that Bitkub began actively procuring replacement digital assets on October 31, 2021. The exact timeline for the completion of this asset replacement process remains undisclosed by the regulator. This dual focus on the initial non-disclosure and the subsequent asset replacement highlights the core of the SEC’s allegations: that the exchange prioritized managing market perception over immediate and transparent disclosure of a significant security breach and financial impact.

Bitkub’s Defense: Averting Financial Panic

In its official response to the SEC’s complaint, Bitkub acknowledged the decision by its disclosure personnel not to immediately reveal the theft of assets from a company wallet. The exchange stated that this non-disclosure was a calculated measure to avert a "bank run" – a scenario where a large number of customers simultaneously attempt to withdraw their funds, potentially leading to the exchange’s insolvency. Bitkub asserted that this decision was made while the company was actively working to replace the stolen assets. However, the exchange strongly disputed the accusation that the individuals involved had acted fraudulently.

Bitkub further clarified its position by explaining that the co-founders of the company personally absorbed the financial loss by purchasing the exact same cryptocurrencies in equivalent quantities to replace those that were stolen. The exchange maintained that, as a result of this internal resolution, neither the company nor its customers experienced any net asset loss stemming directly from the cyber incident. This explanation frames the non-disclosure as a necessary, albeit unconventional, measure to safeguard the company and its user base from the cascading negative effects of widespread panic.

Regulatory Scrutiny and Timeline of Events

The SEC’s investigation into Bitkub’s reporting practices has been ongoing, with earlier pronouncements offering some context. In a separate update issued in September 2025, the SEC stated that, as of September 8, 2025, customer digital assets held by Bitkub were confirmed to be safe and accounted for. While this finding addressed the state of customer assets at a later date, it did not retroactively validate or dismiss the regulator’s allegations concerning Bitkub’s reporting during the critical five-month period in 2021.

The core of the current legal action hinges on the distinction between the act of replacing stolen assets and the regulatory obligation for timely and accurate reporting. Bitkub argues that its decision to withhold information was driven by a paramount concern for preventing a liquidity crisis. Conversely, the SEC maintains that the daily financial reports submitted by the exchange deliberately failed to disclose a material change in its asset holdings prior to the commencement of the asset replacement efforts. This discrepancy in interpretation is central to the ongoing legal battle.

The SEC’s criminal-action process dictates that an inquiry official will now undertake a thorough investigation into the allegations. Following this investigation, a recommendation will be made regarding whether to pursue prosecution. If the inquiry official recommends prosecution, the case file will then be presented to a public prosecutor for further consideration. Ultimately, a court of law would be responsible for adjudicating the allegations, but only if the case is formally brought before it. As of the latest reporting, the allegations against Bitkub and its former directors remain unadjudicated, with the legal process still in its preliminary stages.

Broader Implications for Thailand’s Crypto Landscape

The case against Bitkub carries significant weight for Thailand’s burgeoning cryptocurrency ecosystem. As a dominant player in the local market, Bitkub’s operational integrity and adherence to regulatory frameworks are crucial for fostering investor confidence. The SEC’s decisive action underscores its commitment to enforcing stringent compliance standards and protecting consumers from potential malfeasance within the digital asset space.

The allegations of a cover-up, even if framed by the company as a measure to prevent financial panic, raise critical questions about transparency and corporate governance in the cryptocurrency industry. Regulators worldwide are grappling with how to effectively oversee rapidly evolving digital asset markets, balancing the need for innovation with the imperative of consumer protection. This incident in Thailand provides a case study in the complex challenges faced by both exchanges and regulators in navigating these uncharted territories.

Furthermore, the scale of the theft, estimated at $53 million, highlights the persistent vulnerability of even established platforms to sophisticated cyber threats. The incident serves as a stark reminder for all cryptocurrency exchanges to invest in robust cybersecurity measures and to develop comprehensive incident response plans that prioritize immediate and transparent communication with both users and regulatory bodies.

The outcome of this legal process could set important precedents for future cases involving cryptocurrency exchanges in Thailand and potentially influence regulatory approaches across the region. The SEC’s willingness to pursue criminal charges against a major exchange and its former directors signals a firm stance against any attempts to circumvent regulatory reporting requirements, regardless of the purported intentions behind such actions. The industry will be closely watching as this case progresses through the Thai legal system, anticipating the clarification of responsibilities and the reinforcement of regulatory expectations for all participants in the digital asset market.