Thailand’s Securities and Exchange Commission (SEC) has escalated its regulatory enforcement within the domestic digital asset sector by filing a criminal complaint against Bitkub, the country’s dominant cryptocurrency exchange, and two of its former directors. The regulator alleges that the parties intentionally concealed a major security breach that occurred in May 2021, which resulted in the theft of approximately 1.7 billion Thai baht (roughly $50 million).
Details of the Cyberattack and Alleged Cover-Up
According to the SEC’s investigation, the cyberattack in May 2021 compromised Bitkub’s systems and led to the unauthorized withdrawal of 1.7 billion baht across 16 different digital assets. While the exchange and regulators worked to resolve the issue, and successfully restored all user assets and made good on the losses by the end of October 2021, the SEC asserts that the exchange’s reporting of the event was fraudulent.
The criminal complaint, submitted to the Economic Crime Suppression Division (ECD) of the Thai police, names former directors Sakolkorn Sakavee and Thaweesap Rawan. The SEC alleges that both executives made false statements in official company reports to deliberately mislead the regulator regarding the cyberattack and its operational impact.
Regulatory and Market Implications for Thai Fintech
As the largest cryptocurrency exchange in Thailand, Bitkub commands a significant portion of the domestic market, frequently reporting a 24-hour trading volume exceeding $500 million. This enforcement action highlights the growing global scrutiny on exchange custody, transparency, and executive accountability. Under local digital asset decrees, operators must maintain rigorous standards of disclosure. Filing false information to regulators carries severe criminal penalties, including potential imprisonment and heavy fines for the executives involved.
The case has been referred to local law enforcement for further investigation and potential public prosecution. The outcome could set a precedent for how cybersecurity breaches and regulatory reporting are managed by centralized cryptocurrency platforms in Southeast Asia.
Frequently Asked Questions
Did Bitkub users lose their funds in the May 2021 hack?
No. While 1.7 billion baht ($50 million) was stolen across 16 digital assets, the SEC and Bitkub successfully made good on all user losses by the end of October 2021.
What are the specific charges against the former Bitkub directors?
The SEC has accused former directors Sakolkorn Sakavee and Thaweesap Rawan of making false statements in official company documents to deceive the regulatory body about the cyberattack.
What is the next step in this legal case?
The SEC has filed the complaint with the Economic Crime Suppression Division (ECD). The matter will proceed through a police investigation, which may lead to formal public prosecution in the Thai court system.
