Finance · Crypto
Bitkub Rejects Fraud Claims After Thailand SEC Files Complaint Over Undisclosed 2021 Hack
Thai crypto exchange defends decision to withhold breach information while founders replaced stolen digital assets worth millions

KEY TAKEAWAYS
- ·Thailand's SEC filed a criminal complaint against Bitkub and two former directors on 23 July 2026, alleging false net capital reports between May and October 2021 following a wallet breach.
- ·Bitkub's co-founders purchased and transferred replacement digital assets to cover the stolen funds, and the exchange maintains no customers or the platform suffered financial loss.
- ·The SEC confirmed in September 2025 that customer assets were fully accounted for, though the case now proceeds to Thailand's Economic Crime Suppression Division for investigation.
The Complaint
Thailand's Securities and Exchange Commission filed a criminal complaint on 23 July 2026 against Bitkub and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, alleging false reporting in connection with a cyberattack that occurred in early May 2021. The regulator claims the exchange's daily net capital reports between 10 May and 30 October 2021 failed to reflect a material change in asset balances caused by the theft of digital assets from one of Bitkub's wallets.
The SEC also accused the former directors of creating false entries in company records that suggested customer assets remained intact and that Bitkub had suffered no damage. The case has been forwarded to Thailand's Economic Crime Suppression Division for investigation before potentially moving to prosecutors and the courts.
Bitkub's Defense
Bitkub rejected the fraud allegations in a statement posted to LinkedIn, arguing that the decision to delay disclosure was made to protect customers rather than deceive them. The exchange acknowledged that the person responsible for disclosure obligations at the time withheld the information to prevent mass withdrawals while the company was working to replace the stolen assets.
According to Bitkub, the co-founders purchased the same types and quantities of digital assets that were stolen and transferred them to the company. The exchange maintained that neither customers nor the platform ultimately incurred a financial loss, and that all customer assets currently held on the platform remain safe and fully accounted for.
The stolen assets themselves were never recovered.
Regulatory Context
The SEC conducted an inspection of Bitkub after reports of the cyberattack surfaced online. The regulator confirmed in September 2025 that customers' digital assets were safe and fully accounted for as of 8 September 2025, more than four years after the initial breach.
A criminal complaint in Thailand does not constitute a final determination of guilt. The case will proceed through investigation, prosecution, and court proceedings before any legal conclusions are reached.
Regional Implications
The case highlights ongoing tensions between crypto platforms and regulators across Southeast Asia over transparency and disclosure obligations. Thailand has positioned itself as a relatively progressive jurisdiction for digital assets, with a licensing regime for exchanges and clear regulatory oversight from the SEC. However, incidents like the Bitkub breach test the boundaries of that framework, particularly around how platforms should handle security incidents that are resolved internally without customer losses.
The timing of the complaint, more than five years after the original breach, also raises questions about regulatory enforcement timelines in the region. Bitkub has operated continuously since the incident, suggesting that authorities were satisfied with the operational security and asset coverage at the time of their 2025 inspection.
The outcome of this case may set a precedent for how other exchanges in Thailand and neighboring markets approach disclosure of security incidents, even when customer funds are ultimately protected. For now, Bitkub continues to operate while the investigation proceeds.
RELATED STORIES
Spot something wrong? Email editor@briefasia.com. We log every correction publicly.



