Thailand's cryptocurrency sector is facing renewed regulatory scrutiny after the country's Securities and Exchange Commission (SEC) filed a criminal complaint against Bitkub Online and two former directors. The case revolves around allegations that the exchange provided misleading information to regulators in connection with a cyberattack that occurred in May 2021—a period that saw a surge in exchange breaches worldwide as crypto prices reached record highs.

The complaint adds another layer of pressure on Bitkub, whose parent company has been publicly exploring a potential stock market listing—a move that places its governance, risk management, and disclosure practices under heightened examination from investors and customers. The enforcement action comes under the authority granted to the Thai SEC by the country's Emergency Decree on Digital Asset Businesses B.E. 2561 (2018), the framework that legalized and regulated cryptocurrency trading in Thailand.

SEC Allegations: False Reporting After the 2021 Hack

The Thai SEC's criminal complaint names Bitkub Online along with former directors Sakolkorn Sakavee and Thaweesap Rawan. According to the regulator, a cyberattack in May 2021 led to the theft of 16 types of digital assets held by the exchange, with an estimated value of approximately 1.7 billion baht (around $50 million).

The central allegation is not the breach itself, but rather the reporting that followed. The SEC acknowledged that Bitkub replaced the stolen assets by October 31, 2021. However, regulators contend that the exchange failed to accurately reflect the incident's impact in its daily net liquid capital reports.

Specifically, the SEC alleges that reports submitted between May 10 and October 30, 2021 did not show a "significant reduction" in the exchange's assets, despite the theft having already occurred. The regulator argues that this omission could have created the impression that customer holdings remained intact and that the exchange had sustained no losses.

The complaint asserts that Bitkub and the former directors violated multiple provisions of Thailand's digital asset regulations through the alleged false disclosures. The matter is now expected to proceed through the Thai legal process, encompassing investigation, possible prosecution, and potential court proceedings.

Bitkub's Defense: Delayed Disclosure To Prevent a Bank Run

Bitkub publicly disputed the SEC's allegations in a statement posted on X (formerly Twitter). The exchange characterized the dispute as relating to disclosure decisions made following the May 2021 cyberattack, rather than any fraudulent conduct.

According to Bitkub, the company deliberately delayed disclosing the wallet compromise to prevent a bank run while it worked to recover or replace the stolen funds. The exchange stated that its co-founders subsequently purchased digital assets equivalent to those taken, meaning that neither the exchange nor its customers ultimately suffered financial losses.

Bitkub also emphasized that it has since strengthened its governance, compliance, and security systems in response to the incident.

The case thus hinges on competing interpretations of timing and reporting accuracy. The SEC frames the documentation as materially misleading during the period when assets were compromised, while Bitkub maintains that the delayed disclosure was a deliberate risk-management decision aimed at preventing panic among its customer base. The dispute mirrors a broader global debate over how exchanges should balance transparency obligations against stability concerns during security incidents, a question regulators from the United States to Japan have also confronted in recent years.

Broader Implications for Thailand's Crypto Industry

For Thailand's broader cryptocurrency sector, the complaint highlights how regulators may approach disclosure practices—even in cases where an operator asserts that losses were ultimately covered. In many financial systems, transparency during periods of operational stress is considered as critical as the final outcome, as it shapes how markets and counterparties evaluate risk.

From a compliance and investor standpoint, the case also demonstrates how governance is becoming a focal point for exchanges contemplating major corporate actions. Bitkub's public listing discussions, previously reported by Cointelegraph, have already drawn attention to the company's organizational structure and internal controls. Although the SEC's complaint pertains specifically to 2021 reporting, it emerges at a time when corporate transparency is likely to prove essential for any future fundraising or listing initiative.

Bitkub was founded in 2018 and has grown into one of Thailand's most prominent cryptocurrency trading platforms. According to data from CoinGecko, the exchange ranks first among Thai crypto exchanges by trust score and recorded approximately $712 million in daily trading volume at the time of publication.

IPO Considerations Amplify Governance Scrutiny

In December 2025, Bitkub confirmed to Cointelegraph that it was weighing an initial public offering, including a potential listing in Hong Kong. Cointelegraph additionally reported that it contacted Bitkub for further comment on both the SEC complaint and its IPO plans but had not received a response by the time of publication.

Against that backdrop, the SEC's allegations carry significance beyond the legal question itself. Even without any determination of guilt at this stage, criminal complaints can influence the perceived risk profile for counterparties and prospective investors. They also tend to increase demands for thorough internal documentation, auditability, and overall compliance readiness—requirements that prospective listing venues such as the Hong Kong Stock Exchange typically scrutinize during their approval processes.

For customers, the practical issue is how regulators and the exchange will reconcile the gap between what Bitkub describes as "late coverage" of stolen assets and the SEC's position that earlier reporting should have reflected a reduction in net liquid capital.

As the complaint advances through Thailand's legal system, key questions include what evidence will be presented to substantiate the alleged reporting deficiencies, how Bitkub will defend its "bank run prevention" justification, and whether the dispute will affect the timeline or structure of any future corporate listing plans.