Logo Daily Crypto Briefs
Open menu

Thai SEC Files Bitkub Criminal Complaint Over $50M Hack

5 min read
Breaking News
The official green Bitkub logo on a large metal plaque beside a greyscale regulatory document marked with an unbranded broken-padlock evidence seal.

TL;DR

  • Thailand's SEC filed a criminal complaint against Bitkub Online and two former directors over alleged false reports following a May 2021 cyberattack.
  • The regulator said 16 types of digital assets worth about 1.7 billion baht were withdrawn and that daily capital reports from May 10 through Oct. 30, 2021 did not reflect the loss.
  • The case is with an inquiry officer; the SEC's entry does not establish criminal liability or state a penalty.

BANGKOK, Aug. 1, 2026

Thailand’s Securities and Exchange Commission has filed a criminal complaint against Bitkub Online and two former directors, alleging that the exchange’s reports concealed a May 2021 cyberattack in which digital assets worth about 1.7 billion baht, or roughly $50 million, were withdrawn.

The complaint turns a five-year-old exchange breach into a current enforcement case. The SEC alleges that Bitkub’s daily net-capital reports did not show the effect of the theft, while the matter is now in the inquiry stage and no criminal liability has been established.

KUB, the token associated with the wider Bitkub ecosystem rather than the subject of the complaint itself, closed at $0.7076 on July 23 and $0.6220 on July 25, according to CoinCodex historical data. CoinGecko listed KUB near $0.62 with a market capitalization of about $42.9 million on Aug. 1; the data do not establish that the enforcement action caused the move.

The Thai regulator’s enforcement record says Bitkub was hit by a cyberattack in May 2021 involving 16 cryptocurrencies. It alleges that Form DA 1 reports filed from May 10 through Oct. 30 that year gave the impression that customer assets remained in the ordinary course, even though there was “no indication” the asset balance had materially changed after the theft.

The filing is about disclosure and capital reporting, not a claim that a new customer-fund loss has occurred. Bitkub describes itself as a Thai digital-asset exchange regulated by the Ministry of Finance and the SEC; it did not publish a response on the enforcement-page record, and the status of any separate defense was not immediately clear.

Thai SEC says Bitkub reports missed the 1.7 billion baht loss

The SEC recorded a criminal complaint dated July 23 against Bitkub Online Co., Ltd. and named former directors Sakolkorn Sakavee and Thaweesap Rawan. The regulator says the directors were responsible for the daily net-capital report during the incident and may be liable for the company’s alleged false statements.

Its entry puts the reported value of assets withdrawn at approximately 1.7 billion baht and says the assets covered 16 cryptocurrencies. The regulator does not list the tokens in that record, so it is not possible from the notice alone to identify the assets or determine how the loss was valued at the time.

The record says the alleged conduct falls under Thailand’s Digital Asset Business Emergency Decree. The next procedural step is an inquiry by an investigating officer, not an automatic conviction or a final fine.

Bitkub’s case places reporting controls alongside wallet security as a key exchange risk. A recent Coinbase configuration outage showed how operational incidents can disrupt trading and settlement even where a company says client balances were not at risk. The Thai filing asks a separate question: whether disclosures and regulatory capital reports accurately reflect an incident once it happens.

KUB Coin

KUB
July 1 to Aug. 1, 2026 (UTC daily close)
$0.62
-7.1%
Jul 1 - Aug 1 | High $0.7221 Low $0.62

Bitkub criminal complaint focuses on disclosure, not a new hack

The alleged reporting period ran for nearly six months after the May 2021 event. The enforcement entry says the reports did not reflect a material asset-balance change caused by the theft and that the alleged false statements deceived the SEC about whether customer assets had been affected.

That distinction is material for users: an exchange can restore assets or keep operating while regulators still examine whether its disclosures and prudential reports were complete. The SEC’s current record does not specify whether customers suffered an unreimbursed loss, when any replacement occurred or how the exchange handled individual balances.

The complaint also should not be conflated with a network exploit. KUB is the utility asset of KUB Chain and can be used for network fees and exchange fee credits, according to CoinGecko’s asset profile. The SEC notice does not say KUB Chain failed or identify KUB as part of the 2021 theft.

For comparison, exchange users assessing a security notice need to separate the security event from the disclosure obligations that follow it. The recent Coldcard seed warning was a product-level issue where the maker advised holders to move affected bitcoin, while the Bitkub proceeding concerns what the regulator says the exchange reported after a past incident.

What Bitkub users and KUB holders should watch next

The immediate legal variable is whether the inquiry produces a police case and, ultimately, a prosecution. Thailand’s SEC page marks the complaint as a matter under inquiry, and it does not list a hearing date, potential sanction or resolution timetable.

KUB price data show the token remained a relatively small, volatile market after the filing. It rose from a $0.6220 July 25 close to $0.6571 by July 27 before returning near $0.62 on Aug. 1, a sequence that cautions against treating the enforcement complaint as a standalone market explanation.

Broader crypto sentiment was also subdued: Alternative.me’s Crypto Fear and Greed Index stood at 27, or Fear, in its latest late-July reading. That gauge is not specific to Bitkub or Thailand, but it describes the risk-sensitive backdrop in which exchange-security headlines are being read.

Fear & Greed Index

Late July 2026
27 Fear

Bitkub customers should watch for a direct company statement, official updates from the Thai SEC and any inquiry-stage filing that identifies the legal claims in more detail. KUB holders, meanwhile, have no indication in the SEC notice of a protocol-level action, but will be watching whether the case changes exchange operations, liquidity or the company’s public disclosures.

Stay up to date

Get the latest crypto insights delivered to your inbox

Fact-checked by: Daily Crypto Briefs Fact-Check Desk

Frequently Asked Questions

What did Thailand's SEC allege against Bitkub?

The SEC said Bitkub Online gave false daily net-capital reports after a May 2021 cyberattack. It said the reports did not reflect the theft of digital assets valued at about 1.7 billion baht.

How much was taken in the Bitkub cyberattack?

Thailand's SEC said digital assets across 16 cryptocurrencies, valued at about 1.7 billion baht at the time, were withdrawn in the May 2021 incident.

Has Bitkub been found guilty?

No. The SEC filed a criminal complaint, and its enforcement entry says the case is in the inquiry stage. A complaint is an allegation and does not determine criminal liability.

Does the case concern KUB Coin?

The SEC's entry concerns alleged reporting by Bitkub Online after a 2021 exchange cyberattack. It does not identify KUB Coin as one of the stolen assets or describe a protocol-level incident on KUB Chain.