Thailand's largest cryptocurrency exchange faces a critical moment as a criminal complaint from the Thailand Securities and Exchange Commission casts uncertainty over expansion plans and market confidence, while the company insists no customers lost money from a previously concealed 1.7 billion baht cyberattack.
Why This Matters
• Criminal complaint filed against Bitkub Online and two former executives in July 2026 for allegedly submitting false regulatory reports after concealing a May 2021 cyberattack worth 1.7 billion baht ($47-50M).
• Market leadership eroded: Bitkub has reportedly lost its dominant position to Binance TH in trading volume, falling from over 90% market share to approximately 50%.
• IPO plans uncertain: A planned November 2025 listing on the Stock Exchange of Thailand was postponed; the company now eyes a $200M Hong Kong listing amid legal uncertainty.
• KUB Coin down 96% from its December 2021 peak of 580 baht to approximately 24 baht in July 2026.
The SEC's Case Against Bitkub
The Thailand SEC alleges that Bitkub deliberately misrepresented its financial health for nearly six months following a significant security breach. In May 2021, hackers stole 16 types of digital assets worth approximately 1.7 billion baht from the exchange's wallets. According to the complaint now under review by the Economic Crime Suppression Division, Bitkub filed daily net capital reports between May 10 and October 30, 2021, that failed to accurately reflect the asset reduction, potentially misleading investors about the safety of client funds.
The charges mark a significant escalation in regulatory enforcement within Thailand's digital asset sector, signaling that the SEC is moving beyond warnings to pursue accountability for corporate governance failures. If convicted, the executives could face substantial penalties, and the case may establish new precedents for how cryptocurrency exchanges must handle and disclose security incidents.
For Thailand-based investors and traders who use Bitkub, the immediate risk appears contained—the company maintains that all client assets remain fully backed and compliant with custody rules. However, the reputational impact and ongoing uncertainty could affect the platform's competitive position and future viability.
Bitkub's Defense: Crisis Prevention Strategy
Bitkub executives have offered a straightforward defense: they deliberately withheld information about the theft to prevent a catastrophic "bank run" that would have devastated customers and destabilized Thailand's nascent digital asset industry. The company emphasizes that its co-founders personally purchased equivalent digital assets to replace the stolen funds, ensuring zero financial impact on either the exchange or its clients.
Furthermore, Bitkub points to a September 2025 inspection by the Thailand SEC itself, which verified that client assets were safe and properly accounted for. Since the 2021 incident, the exchange has invested over 400 million baht in cybersecurity enhancements and now uses international custodians including BitGo and Coinbase to secure customer holdings.
This raises a fundamental tension in crypto regulation: should exchanges prioritize immediate transparency even if disclosure could trigger mass withdrawals and amplify losses, or does protecting the broader ecosystem justify temporary concealment when executives can privately cover shortfalls? The Thailand SEC has clearly signaled its position—transparency cannot be sacrificed for expediency, regardless of the outcome.
What This Means for Cryptocurrency Users in Thailand
The criminal complaint creates several practical implications for anyone in Thailand who trades or holds digital assets through Bitkub:
Immediate operational impact: Bitkub continues to operate normally, with routine maintenance announcements for various coins and networks. However, users should understand that legal proceedings could eventually affect platform stability or lead to additional regulatory restrictions.
Enhanced verification requirements: In April 2026, Bitkub implemented stricter identity verification in compliance with the Bank of Thailand's anti-mule account policy. New customers whose accounts were approved from January 1, 2025, onwards face temporary suspension of digital asset withdrawals until completing additional verification procedures. Existing users may encounter similar requirements as anti-money laundering enforcement intensifies.
Tax advantage preserved: Thailand's crypto tax waiver on capital gains remains in effect until the end of 2029, but only for trades conducted through locally regulated platforms like Bitkub. This creates a financial incentive to use licensed Thailand exchanges despite the current uncertainty, as offshore alternatives would not qualify for the tax exemption.
Market alternatives expanding: With Binance TH now reportedly surpassing Bitkub in trading volume, Thailand-based traders have credible alternatives. Major Thailand banks have also entered the sector—Kasikornbank acquired stakes in competing exchange Satang, diversifying the domestic market.
The Collapsed SCB Deal and Unicorn Status
Bitkub's current predicament represents a dramatic reversal from its 2021 peak. That November, Siam Commercial Bank's parent company SCB X announced plans to acquire 51% of Bitkub for approximately 17.85 billion baht, valuing the entire exchange at 35 billion baht ($1B) and conferring coveted unicorn status. The deal was expected to close by the first quarter of 2022, pending regulatory approval.
Instead, SCB X terminated the acquisition in August 2022, citing regulatory issues Bitkub faced with the Thailand SEC and deteriorating cryptocurrency market conditions. The timing is significant—the May 2021 cyberattack occurred just months before the acquisition announcement, raising questions about whether SCB's due diligence adequately captured the reporting issues that would later trigger criminal charges.
Without the SCB partnership and its banking infrastructure, Bitkub has struggled to maintain market dominance as global competitors established Thailand operations. The failed deal also eliminated a potential capital cushion that might have funded more aggressive expansion or technology investments.
KUB Coin: From 580 Baht to 24 Baht
Bitkub's native token, KUB Coin, has experienced significant value decline, plummeting 96% from its December 2021 peak of approximately 580 baht to around 24 baht in July 2026. The token declined 14% in the last month alone and 56% over the past year, underperforming the broader cryptocurrency market.
Price predictions for KUB Coin diverge sharply. Some analytical models forecast modest recovery to $0.66-0.71 by the end of 2026, representing 5% growth. Others project further decline to approximately $0.57, with sentiment indicators showing "Fear" among traders. The token's performance is directly tied to Bitkub's corporate fortunes and investor confidence in its governance—both currently under pressure.
For Thailand residents who accumulated KUB Coin during the 2021 bull market, the losses have been substantial. Unlike customer deposits that Bitkub's founders personally covered after the cyberattack, token holders have no such protection and must absorb market-driven declines.
Thailand's Evolving Crypto Regulatory Framework
The Bitkub case unfolds against a backdrop of increasingly sophisticated cryptocurrency regulation in Thailand. The Thailand Cabinet approved a proposal in 2026 allowing digital assets, including Bitcoin and carbon credits, to serve as underlying assets in the country's derivatives and capital markets. The Thailand SEC is amending the Derivatives Act to implement this change, aiming to modernize markets while strengthening oversight.
The regulatory agency has shifted from pure risk containment to active market development, placing digital assets at the center of its 2026-2028 strategic plan. Early 2026 saw finalized rules for Bitcoin and crypto Exchange-Traded Funds (ETFs) and futures trading on the Thailand Futures Exchange. Implementation of the Travel Rule—requiring exchanges to share transaction information—is expected during 2026.
However, the Bank of Thailand maintains its prohibition on cryptocurrency payments for goods and services, and consumer stablecoin use remains restricted. In January 2026, the government launched a "gray money" campaign targeting crypto as part of anti-money laundering efforts, creating additional compliance complexity.
All cryptocurrency exchanges in Thailand must obtain SEC licenses and meet stringent Know Your Customer (KYC) and Anti-Money Laundering (AML) requirements. Bitkub holds certifications including ISO 27001, ISO 27701, and SOC 2 Type I, and undergoes annual Thailand SEC security audits. Despite these credentials, the criminal complaint demonstrates that compliance certifications alone do not shield exchanges from enforcement when regulators believe reporting violations occurred.
The Path Forward: Hong Kong or Bangkok?
Bitkub's ambitions for a public listing represent both a potential lifeline and a significant challenge. The company postponed a planned November 2025 IPO on the Stock Exchange of Thailand and now reportedly considers a $200M listing in Hong Kong. The shift suggests either difficulty meeting Thailand listing requirements amid the criminal investigation or a strategic calculation that international investors might offer better valuations.
A successful Hong Kong listing would provide capital to defend market share against Binance TH and fund expansion into underserved Southeast Asian markets including Cambodia, Vietnam, and Laos. However, Hong Kong regulators conduct rigorous due diligence, and the pending criminal charges in Thailand will inevitably complicate that process.
The exchange also faces the fundamental challenge of rebuilding investor trust—what industry observers now identify as Bitkub's biggest obstacle. Even if the criminal case ultimately does not result in convictions, the prolonged uncertainty damages the platform's credibility in a sector where security and transparency are paramount selling points.
For Thailand's digital asset ecosystem, the Bitkub case will likely accelerate regulatory evolution regardless of its outcome. Exchanges can expect stricter requirements for incident reporting, capital adequacy disclosures, and real-time asset verification. The Thailand SEC's willingness to pursue criminal charges sends a clear message: Thailand intends to build a regulated, legitimate cryptocurrency market, and platforms that compromise transparency—even with good intentions—will face serious consequences.
