Thailand’s crypto market is facing renewed regulatory pressure after the country’s Securities and Exchange Commission (SEC) filed a criminal complaint against Bitkub and two former directors over allegations of inaccurate disclosures tied to a 2021 cyberattack. The Thai SEC has served as the country’s primary digital asset regulator under the Emergency Decree on Digital Asset Businesses enacted in 2018, a framework that grants it authority to pursue both administrative and criminal enforcement. In a report released Thursday, the SEC stated it has brought the case against Bitkub Online alongside former executives Sakolkorn Sakavee and Thaweesap Rawan. The regulator accuses them of submitting company reports that misrepresented the hack's true impact during the period under investigation. This regulatory action comes at a particularly sensitive time for Bitkub, as its parent company actively considers a potential public listing—a step that typically brings significantly stricter expectations regarding corporate transparency and governance.

SEC Alleges Understated Losses in Capital Reporting

At the center of the SEC’s complaint is the assertion that Bitkub failed to accurately disclose the full consequences of the May 2021 cyberattack. According to the regulator, the security incident resulted in the theft of 16 categories of digital assets directly from the exchange, possessing a stated value of approximately 1.7 billion baht (around $50 million). The SEC further alleged that while Bitkub eventually replaced the stolen assets by October 31, 2021, the exchange’s daily net liquid capital reports did not reflect any significant reduction in assets during the critical period from May 10 through October 30, 2021—roughly six months in which the exchange’s disclosed financial position appeared unaffected.

The SEC argues that this reporting gap could have falsely created the impression that customer assets remained effectively unchanged and that the platform had not suffered meaningful losses from the attack. Consequently, the complaint accuses Bitkub and the former directors of violating multiple provisions of Thailand’s digital asset regulations in connection with these alleged false disclosures. Under the 2018 framework, criminal violations can carry penalties including imprisonment and substantial fines, distinguishing this complaint from routine civil or administrative actions. The SEC confirmed that the matter will now move forward through formal investigation and, if warranted, prosecution and court proceedings.

Bitkub Counters: Timing Aimed at Preventing a Bank Run

Bitkub firmly rejected the SEC’s claims in a public post on X. The exchange described the complaint as stemming from post-incident disclosure decisions made following the May 2021 cyberattack, rather than from any fraudulent intent. Bitkub explained that it deliberately delayed disclosing the wallet compromise to help prevent a devastating bank run while it actively worked to address the loss.

Furthermore, Bitkub stated that its co-founders later purchased digital assets equivalent to the stolen funds, arguing that neither the company nor its customers ultimately experienced any financial losses. Alongside its rebuttal, Bitkub emphasized that it has since significantly strengthened its governance, compliance, and security systems. The exchange did not indicate any intention to change or reverse its position, framing the controversy as a risk-management dispute over communication timing rather than a deliberate concealment of ongoing financial damage.

Implications as Bitkub Eyes a Public Listing

Beyond the immediate legal process, the SEC’s complaint arrives just as Bitkub’s ownership group explores a potential public offering. In December 2025, Bitkub confirmed to Cointelegraph that it was considering an initial public offering (IPO), with Hong Kong identified as a potential listing venue. This context is crucial because public-market pathways generally increase pressure on disclosure quality, internal controls, and auditability—particularly for regulated digital asset exchanges.

Even if Bitkub’s parent company proceeds with its fundraising or IPO plans, ongoing regulatory scrutiny of past reporting practices can heavily influence investor sentiment, due-diligence findings, and the level of examination applied by prospective underwriters or listing authorities. Simultaneously, the case highlights an underlying tension increasingly seen in crypto regulation across multiple jurisdictions: whether a firm’s attempts to stabilize operations after an incident justify delayed or incomplete public disclosures, and what specific thresholds regulators consider “accurate” reporting during the interim period.

Market Position and Next Steps

Founded in 2018, Bitkub has established itself as one of Thailand’s most prominent cryptocurrency exchanges. According to CoinGecko data, it ranks first among Thai exchanges by trust score and recorded approximately $712 million in daily trading volume at the time of the referenced publication. Thailand ranks among the more active crypto markets in Southeast Asia, and Bitkub’s dominant domestic position means that any regulatory outcome could carry weight beyond the company itself. For market participants, the SEC complaint may directly affect how counterparties and users evaluate the exchange’s compliance and reporting standards—especially given its already significant market share.

While Bitkub disputes the allegations, the case's next phase will be driven by Thailand’s formal investigation process and any subsequent prosecution decisions. Observers will be closely watching whether regulators can successfully demonstrate that the disputed reports materially misled stakeholders, how Bitkub substantiates its claims of later financial compensation, and whether additional documents surface regarding the timeline of disclosures around the May 2021 hack. As the legal process unfolds—with IPO plans remaining firmly in the background—clarity around Bitkub's internal controls and incident communication strategies could become a defining factor in how the exchange is ultimately judged by both regulators and public market investors.