Thai SEC Files Criminal Complaint Against Bitkub Over Alleged Cover-Up of $50M 2021 Hack

Thailand’s Securities and Exchange Commission has filed a criminal complaint against Bitkub Online Co., Ltd. and two former directors, accusing the country’s largest domestic crypto exchange of concealing a May 2021 cyberattack in which 16 digital assets worth roughly 1.7 billion baht — about $50 million — were stolen from its wallets.

The complaint, filed with Thailand’s Electronic Crimes Division and reported by the Bangkok Post on July 24, marks a sharp escalation in a years-long regulatory standoff. The SEC’s official press release confirms the referral covers both Bitkub as a corporate entity and its former directors, accused of making false statements in company documents to deceive the regulator. The alleged offence falls under Section 88(2) of Thai securities law.

The core charge is not the theft itself. It is the disclosure failure. The accusation is that Bitkub’s leadership actively hid the hack from regulators and the public rather than reporting it as required. According to the SEC’s statement, the former directors submitted documents containing false information designed to mask the true extent and nature of the May 2021 breach — during which 16 types of cryptocurrencies were drained from the platform.

That distinction matters enormously. Exchange hacks are, regrettably, common in crypto. What transforms a security failure into a criminal matter is the allegation that executives sat on the information and affirmatively lied about it. If proven, the case would establish that the concealment — not the initial breach — is what drew criminal referral, a line regulators globally have drawn with increasing clarity since the collapse of FTX exposed how much damage hidden liabilities can do.

Bitkub has rejected the allegations. The exchange publicly pushed back against the SEC’s complaint, according to Fintech News Singapore, though the specifics of its defense have not been fully detailed in public statements. That resistance sets up a contested legal proceeding rather than a settled enforcement action. The outcome will likely hinge on what internal documents and communications the ECD can surface during its investigation.

This is not Bitkub’s first brush with Thai regulators. In a separate prior action, the SEC fined Bitkub’s chief technology officer 8.53 million baht following an insider trading investigation, as reported by The Nation Thailand. That case centered on trading activity tied to tokens listed on the exchange, raising questions about internal controls that the current concealment allegations will only intensify. For a platform that dominates Thailand’s domestic crypto market and has positioned itself as a national champion in Southeast Asia’s competitive exchange landscape, repeated regulatory actions chip away at the institutional credibility that retail users — and eventually institutional partners — require.

The timing of the criminal referral lands against a risk-off market backdrop. Total crypto market capitalization stands at $2,282.12 billion, down 0.82% over 24 hours, with the Fear & Greed Index reading 28 out of 100 — firmly in “Fear” territory. BBTC$64,124.00▼1.00% trades at $64,402, off 1.2% on the day, while EETH$1,864.44▼1.30% has slipped 2.8% to $1,862. SSOL$73.99▼2.60% and DDOGE$0.0691▼0.80% are among the hardest-hit majors, down 3.6% and 4.5% respectively. None of those moves are directly attributable to the Bitkub complaint, but a skittish market means regulatory headlines feed into an already defensive posture among traders — particularly in jurisdictions where enforcement has been intensifying.

Thailand’s regulatory environment for digital assets has tightened materially over the past several years. The SEC has moved from a relatively permissive stance — one that allowed Bitkub to grow into the country’s dominant exchange — toward a more aggressive enforcement posture that mirrors trends in Singapore, South Korea, and the United States. The Bitkub complaint fits that trajectory cleanly: regulators are no longer satisfied with fines and remediation orders when they believe executives have actively misled them. A criminal referral to the ECD signals the SEC considers the alleged conduct serious enough to pursue individual liability, not just corporate penalties.

For Bitkub’s users, the practical question is whether the exchange can continue operating normally while the criminal case proceeds. Thai securities law under Section 88(2) targets the individuals and the entity for false statements, and the complaint does not automatically trigger a suspension of Bitkub’s operating license. But reputational damage compounds with each regulatory action. The prospect of criminal proceedings against former directors raises the possibility of further scrutiny of current leadership.

The ECD will now determine whether to formally investigate and potentially prosecute. Bitkub’s next public move — whether a detailed legal rebuttal or a quieter settlement posture — will signal how the exchange intends to weather what is now the most serious regulatory challenge in its history.