Thai watchdog probes exchange over $50M hack

TLDR

Thailands Securities and Exchange Commission has filed a criminal complaint over an undisclosed ~$50 million hack at local exchange Bitkub, triggering a formal probe into its past disclosures.

1. The complaint alleges Bitkub and two former directors hid losses from a May 2021 cyberattack that stole about 1.7 billion baht in digital assets.
2. Bitkub says co-founders fully replaced the stolen assets, but regulators are focused on reporting failures, raising governance and compliance risks rather than new customer losses.
3. Next steps hinge on Thailands Economic Crime Suppression Division investigation, which could lead to charges, penalties, and tighter standards for exchanges across the Thai crypto market.

Deep Dive

1. Alleged Concealment Of A Past Hack

Thailands SEC has filed a criminal complaint against Bitkub Online and two ex-directors, alleging they submitted false daily capital reports after a May 2021 hack that drained 16 asset types worth about $50 million (1.7 billion baht) from the platforms wallets.

Regulators say Bitkubs Form DA 1 filings from May to October 2021 failed to reflect the loss, creating the impression that customer assets and the firms net capital were unaffected. The complaint has been lodged with the Economic Crime Suppression Division, which will investigate before prosecutors decide whether to indict, according to detailed reporting on the Bitkub case.

2. User Funds Versus Regulatory Risk

Bitkub has stated that its co-founders replaced the stolen assets by late October 2021, and that all customer balances are currently intact and fully accounted for. It also says it reported the incident to law enforcement in May 2021 and upgraded security and governance under an independent board.

The SECs focus is not on a fresh loss of customer funds, but on whether executives misled regulators by omitting the hacked amount from official reports. If proven, that can translate into fines, director bans, and stricter oversight, even if users were made whole. In an environment where crypto security losses topped over $1 billion in the first half of 2026, as noted in a Blockaid-linked report, regulators are increasingly intolerant of non-transparent incident handling.

3. Key Things To Watch Next

1. Outcome of the Economic Crime Suppression Divisions investigation and any formal charges against Bitkub or former executives.
2. Possible SEC follow-up measures, such as tighter reporting rules, incident disclosure requirements, or constraints on Bitkubs operations.
3. Whether other regional exchanges review and publicly clarify their own incident reporting and security controls in response, which could reshape venue choices for Thai and Southeast Asian traders.

Confidence: high, based on recent regulator complaints and multiple independent news reports.

Conclusion

This probe is less about the technical details of a three-year-old hack and more about how a major Thai exchange handled transparency and regulatory reporting. If the case results in penalties or new rules, it could push Thai exchanges toward more robust disclosure and governance standards, improving long term market integrity but potentially raising short term operational and compliance costs for platforms and their users.