Thailand's SEC Charges Bitkub and Ex-Directors Over Nearly Six-Month Cover-Up of 2021 Hack
Thailand's dominant crypto exchange faces criminal charges, a collapsing native token, and a shrinking market share, all while exploring a Hong Kong IPO to stay relevant.
Thailand's Securities and Exchange Commission filed a criminal complaint on July 23, 2026 against Bitkub Online Co., Ltd. and two former directors, co-founder Sakolkorn Sakavee and Thaweesap Rawan, alleging that the company and the two individuals falsified regulatory filings to conceal a major cyberattack from 2021. The complaint was submitted to the Economic Crime Suppression Division.
What Happened in 2021
In May 2021, attackers compromised Bitkub's systems and made off with 16 types of digital assets worth approximately 1.7 billion baht, or roughly $48 to $50 million USD at the time. Rather than disclose the breach to regulators or the public, the company allegedly filed false Form DA 1 daily net capital reports from May 10 through October 30, 2021. Those filings showed no meaningful change in customer asset balances despite the theft. The Thai SEC says the filings violated Sections 76, 88, and 94 of the Digital Asset Business Decree, which cover false submissions and document falsification.
Sakavee addressed the allegations in a personal video posted to Facebook in July 2026, as reported by Nation Thailand. He confirmed he had signed the altered reports and said he believed immediate disclosure would have triggered panic withdrawals. "I used my own money to cover the losses so no customer was affected," he said, and he offered a public apology. Bitkub issued its own statement clarifying that "all customer assets currently held on our platform remain safe, fully accounted for, and protected in accordance with applicable regulations," and framed the matter as a dispute over disclosure timing rather than fraud. The company says customers were fully reimbursed using founder funds by October 31, 2021.
Five Years of Fallout
The 2021 incident set off a chain of consequences that reshaped Bitkub's trajectory. Siam Commercial Bank, Thailand's oldest commercial bank, announced a plan in November 2021 to buy a 51% stake in Bitkub for 17.85 billion baht, a deal that would have valued the company at roughly $1 billion USD. The SEC intervened, flagging a conflict of interest in how Bitkub had listed its own KUB Coin on its platform and ordering a review. SCB walked away in August 2022.
KUB Coin itself tells much of the story in raw numbers. The token peaked at approximately 580 baht (around $16.50 USD) in December 2021. As of late July 2026, it trades at roughly $0.66 USD or about 24 baht, down approximately 96% from its all-time high. The token's market capitalization sits near $46.5 million USD with a circulating supply of around 110 million KUB, according to CoinStats data. KUB fell approximately 12% in the seven-day period surrounding the SEC announcement, according to a rolling seven-day metric captured on July 27, 2026.
Competitive Pressure at Home
Beyond the legal and token troubles, Bitkub is losing ground in its own market. The exchange once commanded more than 90% of Thailand's crypto trading volume. That share had already fallen to roughly half before Gulf Binance, a joint venture between Binance and Gulf Energy (Thailand's largest energy conglomerate), launched publicly in 2024 and compressed it further. Gulf Binance has since captured an estimated 20 to 30% of domestic volume. As of June 2026, Thailand has four licensed retail exchanges: Bitkub, Gulf Binance, Bitazza, and Zipmex, which is currently under restructuring. Thailand reported over 7 million digital asset holders as of Q1 2026, approximately one in ten adults, with retail trading volume growing at around 37% annually. That is an expanding market Bitkub is no longer winning by default.
A Hong Kong Pivot and What It Signals
With a planned listing on the Stock Exchange of Thailand shelved, Bitkub is now in early talks with advisors about a $200 million IPO on the Hong Kong Stock Exchange. No timeline has been confirmed. The move reflects a pattern seen across Asia: crypto-native companies from markets with regulatory uncertainty using Hong Kong's licensed framework as a capital markets bridge. Whether the criminal complaint complicates that path remains an open question, and the investor confidence problem that analysts have flagged may prove a more immediate obstacle than any operational or technological concern.
Analyst Udomsak Rakwongwan, cited in reporting by the Bangkok Post, assessed Bitkub's situation as a "gradual decline" rather than a sudden collapse, with investor confidence identified as the more pressing problem than the underlying technology.
Why This Case Extends Beyond Thailand
The Bitkub situation carries lessons for the broader region. The SEC's enforcement posture is sharpening. A new extraterritorial licensing rule that took effect on April 13, 2025 required all foreign platforms serving Thai users to hold local licences; the grace period expired June 28, 2026, leaving platforms like Binance.com and OKX subject to active enforcement unless operating through licensed local entities. How the Bitkub criminal case resolves will be watched closely by regulators in Indonesia, Vietnam, and the Philippines as they build out their own digital asset enforcement frameworks.
For retail users across Southeast Asia and beyond, including in markets such as Nigeria, India, and Pakistan where locally dominant exchanges operate under comparatively lower regulatory scrutiny, the case reinforces a straightforward point: exchanges that self-remediate quietly after a hack are not the same as exchanges that disclose promptly. Proof-of-reserves and mandatory breach disclosure timelines are not bureaucratic formalities. They are the tools users need to assess whether their funds are actually safe.
The case also poses a direct credibility challenge for Bitkub Chain, the company's EVM-compatible Layer-1 blockchain that uses KUB as its gas token. The chain currently shows no meaningful total value locked on DefiLlama, and the legal and reputational uncertainty surrounding the exchange risks further dampening developer interest in building on the network.
No indictment has been issued as of July 27, 2026, and the case remains in the investigative phase.