GoCheckMyCrypto.comThailand's SEC files criminal complaint against Bitkub over concealed $50 million cyberattack
Thailand's Securities and Exchange Commission filed a criminal complaint against Bitkub exchange and two former directors for concealing a May 2021 cyberattack in which 1.7 billion baht ($50 million) across 16 digital assets were stolen. The regulator alleges Bitkub made false statements in company documents to hide the breach during the May-October 2021 period, even though customer losses were repaid by October.
Thailand's Securities and Exchange Commission has filed a criminal complaint against Bitkub exchange and two former directors, alleging they concealed a May 2021 cyberattack that resulted in the theft of approximately 1.7 billion baht ($50 million) across 16 digital assets, according to CoinDesk's reporting.
The case marks a significant enforcement action in Asia-Pacific jurisdictions beyond the United States, establishing potential precedent for how regional regulators treat disclosure violations tied to security breaches at crypto exchanges.
Per the SEC's allegations, Bitkub did not disclose the incident accurately in company filings and reports during the May-October 2021 period when it was resolving the breach. The regulator named former directors Sakolkorn Sakavee and Thaweesap Rawan as defendants, accusing them of making false statements in company documents to deceive the regulator. Although Bitkub and the SEC made good the customer losses by the end of October 2021, the regulator proceeded with criminal charges focused on the concealment itself rather than the uncompensated harm to customers.
Bitkub, the largest crypto exchange operating in Thailand with reported 24-hour trading volume exceeding $500 million, now faces a prosecution process that begins with investigation by the Economic Crime Suppression Division (ECD) followed by possible public prosecution, according to CoinDesk.
The enforcement action signals stricter application of fiduciary disclosure duties in emerging markets, even when customer restitution has already occurred. Regulators in Thailand are treating the concealment of a security breach as a distinct violation from the breach itself, creating potential liability for exchange management separate from investor compensation.
The case will proceed to police investigation and potentially to public prosecution, though neither timeline nor sentencing guidance has been announced.
What remains unclear: the specific false statements made in which filings, the penalties or jail time the defendants may face, and whether customers were notified of the breach in real time while regulators were being misled.
Thailand's SEC filed a criminal complaint against Bitkub and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, for concealing the cyberattack and making false statements in regulatory filings.
Thailand's SEC is prosecuting Bitkub for concealment of a 2021 cyberattack, establishing precedent for how emerging-market regulators enforce disclosure obligations outside US jurisdiction. Watch for the investigation's findings on what false statements were made and what penalties are imposed, either of which could signal how strictly Asia-Pacific regulators will enforce exchange transparency in future breaches.
And that's the way it is.
Not financial advice. Crypto Cronkite reports events and explains what they may mean. It never tells you to buy or sell anything. Do your own research.