News Heat Trend
GCSA Discloses KuCoin Phishing, Bitkub Supply Chain Risks, and Avalanche Contract Vulnerability; Attacker Withdrew Approximately 1.0134 Million USDC
According to Odaily monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing multiple recent digital asset security risks. Attackers impersonated [email protected] to trick users into downloading remote control programs. GCSA found that the relevant domain had not previously been configured with DMARC; after notification, KuCoin has completed remediation and enabled a DMARC quarantine policy. After the original version of the MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. Installation methods without pinned versions and the risk of plaintext keys may lead to credential leakage. There is currently no evidence of actual theft, and Bitkub has not yet responded to the notification. Within the Avalanche ecosystem, the TranchePool vault was attacked due to a flaw in its cross-day settlement logic. The attacker exploited flash loans and repeated withdrawals to transfer out approximately 1.0134 million USDC within 202 seconds. This incident is an upper-layer application vulnerability, and the underlying network was not affected. GCSA stated that it has reported the leads to the relevant platforms and published the original analysis and evidence for industry reference.
Thai SEC Accuses Bitkub Executives of Concealing $50 Million Hack Loss, Files Criminal Complaint
Odaily News: The Thai Securities and Exchange Commission (SEC) has filed a criminal complaint against cryptocurrency exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of submitting false financial reports between May and October 2021. The case has been referred to the Thai Economic Crime Suppression Division (ECD) for investigation, and prosecutors will determine whether to formally indict. The SEC stated that Bitkub suffered a cyberattack in May 2021, resulting in the theft of 16 types of digital assets, with losses exceeding $50 million. Regulatory investigations revealed that Bitkub failed to reflect the related losses in its Form DA 1 daily net capital reports from May 10 to October 30, 2021. The SEC alleges that the involved executives made false entries in the company's official documents, leading regulators to believe that client assets were intact and the company had not suffered financial losses. Bitkub subsequently completed the acquisition of replacement assets in late October 2021, but the SEC maintains that the reports during that period constituted false statements. In a statement on July 23, Bitkub stated that current customer holdings were secure and accounts were complete. Bitkub claimed that its co-founders purchased replacement assets of the same type and quantity, bearing the losses themselves, and noted that the cyber theft incident had been reported to law enforcement authorities on May 10, 2021.
Thailand SEC Files Criminal Complaint Against Bitkub and Two Former Directors Over 2021 False Reporting Case
According to The Nation Thailand, the Thai Securities and Exchange Commission has filed a criminal complaint with the Economic Crime Suppression Division against digital asset exchange Bitkub and its two former directors, alleging false statements in daily net capital reports submitted after the 2021 hacking incident. The incident resulted in the theft of approximately 1.7 billion baht worth of digital assets. The regulator believes that Bitkub failed to accurately reflect asset losses and related changes during the period from May to October 2021.
Thailand's Central Bank Reviews High-Value USDT Transactions to Combat Money Laundering and Illicit Funds
the Bank of Thailand is strengthening stablecoin regulation to combat money laundering, illegal financing, and "grey capital" in the country. The central bank is collaborating with the Securities and Exchange Commission to review high-value stablecoin transactions, focusing on USDt (USDT), cash transactions, and foreign exchange dealings to identify and prevent illicit fund flows. Thailand will also expand the compliance responsibilities of commercial banks in areas such as cash networks, foreign exchange services, gold trading, and suspicious stablecoin transactions. In 2025, Thailand suffered losses of 115 billion Thai baht (approximately $3.4 billion) due to scams, recording about 173 million fraudulent calls and text messages. Cash deposits exceeding 5 million Thai baht will also require full disclosure. Bitkub, Thailand's largest exchange, processes a daily trading volume of approximately $26 million, nearly 40% of which is foreign exchange trading, with the USDT/THB trading pair being the most popular. In 2025, Thailand's banking sector froze 3 million bank accounts as part of efforts to crack down on nominee accounts, grey capital, and suspicious activities. (Cointelegraph).
GCSA Discloses KuCoin Phishing, Bitkub Supply Chain Risks, and Avalanche Contract Vulnerability; Attacker Withdrew Approximately 1.0134 Million USDC
According to Odaily monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing multiple recent digital asset security risks. Attackers impersonated [email protected] to trick users into downloading remote control programs. GCSA found that the relevant domain had not previously been configured with DMARC; after notification, KuCoin has completed remediation and enabled a DMARC quarantine policy. After the original version of the MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. Installation methods without pinned versions and the risk of plaintext keys may lead to credential leakage. There is currently no evidence of actual theft, and Bitkub has not yet responded to the notification. Within the Avalanche ecosystem, the TranchePool vault was attacked due to a flaw in its cross-day settlement logic. The attacker exploited flash loans and repeated withdrawals to transfer out approximately 1.0134 million USDC within 202 seconds. This incident is an upper-layer application vulnerability, and the underlying network was not affected. GCSA stated that it has reported the leads to the relevant platforms and published the original analysis and evidence for industry reference.
Thai SEC Accuses Bitkub Executives of Concealing $50 Million Hack Loss, Files Criminal Complaint
Odaily News: The Thai Securities and Exchange Commission (SEC) has filed a criminal complaint against cryptocurrency exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of submitting false financial reports between May and October 2021. The case has been referred to the Thai Economic Crime Suppression Division (ECD) for investigation, and prosecutors will determine whether to formally indict. The SEC stated that Bitkub suffered a cyberattack in May 2021, resulting in the theft of 16 types of digital assets, with losses exceeding $50 million. Regulatory investigations revealed that Bitkub failed to reflect the related losses in its Form DA 1 daily net capital reports from May 10 to October 30, 2021. The SEC alleges that the involved executives made false entries in the company's official documents, leading regulators to believe that client assets were intact and the company had not suffered financial losses. Bitkub subsequently completed the acquisition of replacement assets in late October 2021, but the SEC maintains that the reports during that period constituted false statements. In a statement on July 23, Bitkub stated that current customer holdings were secure and accounts were complete. Bitkub claimed that its co-founders purchased replacement assets of the same type and quantity, bearing the losses themselves, and noted that the cyber theft incident had been reported to law enforcement authorities on May 10, 2021.
Thailand SEC Files Criminal Complaint Against Bitkub and Two Former Directors Over 2021 False Reporting Case
According to The Nation Thailand, the Thai Securities and Exchange Commission has filed a criminal complaint with the Economic Crime Suppression Division against digital asset exchange Bitkub and its two former directors, alleging false statements in daily net capital reports submitted after the 2021 hacking incident. The incident resulted in the theft of approximately 1.7 billion baht worth of digital assets. The regulator believes that Bitkub failed to accurately reflect asset losses and related changes during the period from May to October 2021.
Related news
GCSA Discloses KuCoin Phishing, Bitkub Supply Chain Risks, and Avalanche Contract Vulnerability; Attacker Withdrew Approximately 1.0134 Million USDC
According to Odaily monitoring, the Global Cybersecurity Alliance (GCSA) has released three independent technical investigation reports, disclosing multiple recent digital asset security risks. Attackers impersonated [email protected] to trick users into downloading remote control programs. GCSA found that the relevant domain had not previously been configured with DMARC; after notification, KuCoin has completed remediation and enabled a DMARC quarantine policy. After the original version of the MCP toolkit referenced in Bitkub's official documentation was taken down, a third party re-registered the npm package name. Installation methods without pinned versions and the risk of plaintext keys may lead to credential leakage. There is currently no evidence of actual theft, and Bitkub has not yet responded to the notification. Within the Avalanche ecosystem, the TranchePool vault was attacked due to a flaw in its cross-day settlement logic. The attacker exploited flash loans and repeated withdrawals to transfer out approximately 1.0134 million USDC within 202 seconds. This incident is an upper-layer application vulnerability, and the underlying network was not affected. GCSA stated that it has reported the leads to the relevant platforms and published the original analysis and evidence for industry reference.
MLM：疑似与 Bitkub 联创相关钱包四周卖出 13.96 万枚 ZEC，错过超 1.1 亿美元潜在涨幅
一组疑似与 Bitkub 联合创始人、前董事长 Sakolkorn Sakavee 相关的钱包过去约四周持续解锁并出售 ZEC。MLM 表示，该组钱包累计卖出约 13.96 万枚 ZEC，卖出时价值约 1.11 亿美元，按当前价格计算价值约 2.23 亿美元，意味着其少获得超过 1.1 亿美元的潜在涨幅。此前 8 月 27 日，MLM 曾监测到该组钱包累计解锁 6.582 万枚 ZEC，并已卖出其中 5.39 万枚，同时买入 536.7 枚 BTC。
Thai SEC Accuses Bitkub Executives of Concealing $50 Million Hack Loss, Files Criminal Complaint
Odaily News: The Thai Securities and Exchange Commission (SEC) has filed a criminal complaint against cryptocurrency exchange Bitkub Online and two former directors, Sakolkorn Sakavee and Thaweesap Rawan, accusing them of submitting false financial reports between May and October 2021. The case has been referred to the Thai Economic Crime Suppression Division (ECD) for investigation, and prosecutors will determine whether to formally indict. The SEC stated that Bitkub suffered a cyberattack in May 2021, resulting in the theft of 16 types of digital assets, with losses exceeding $50 million. Regulatory investigations revealed that Bitkub failed to reflect the related losses in its Form DA 1 daily net capital reports from May 10 to October 30, 2021. The SEC alleges that the involved executives made false entries in the company's official documents, leading regulators to believe that client assets were intact and the company had not suffered financial losses. Bitkub subsequently completed the acquisition of replacement assets in late October 2021, but the SEC maintains that the reports during that period constituted false statements. In a statement on July 23, Bitkub stated that current customer holdings were secure and accounts were complete. Bitkub claimed that its co-founders purchased replacement assets of the same type and quantity, bearing the losses themselves, and noted that the cyber theft incident had been reported to law enforcement authorities on May 10, 2021.
Thailand SEC Files Criminal Complaint Against Bitkub and Two Former Directors Over 2021 False Reporting Case
According to The Nation Thailand, the Thai Securities and Exchange Commission has filed a criminal complaint with the Economic Crime Suppression Division against digital asset exchange Bitkub and its two former directors, alleging false statements in daily net capital reports submitted after the 2021 hacking incident. The incident resulted in the theft of approximately 1.7 billion baht worth of digital assets. The regulator believes that Bitkub failed to accurately reflect asset losses and related changes during the period from May to October 2021.
Thailand's Central Bank Reviews High-Value USDT Transactions to Combat Money Laundering and Illicit Funds
the Bank of Thailand is strengthening stablecoin regulation to combat money laundering, illegal financing, and "grey capital" in the country. The central bank is collaborating with the Securities and Exchange Commission to review high-value stablecoin transactions, focusing on USDt (USDT), cash transactions, and foreign exchange dealings to identify and prevent illicit fund flows. Thailand will also expand the compliance responsibilities of commercial banks in areas such as cash networks, foreign exchange services, gold trading, and suspicious stablecoin transactions. In 2025, Thailand suffered losses of 115 billion Thai baht (approximately $3.4 billion) due to scams, recording about 173 million fraudulent calls and text messages. Cash deposits exceeding 5 million Thai baht will also require full disclosure. Bitkub, Thailand's largest exchange, processes a daily trading volume of approximately $26 million, nearly 40% of which is foreign exchange trading, with the USDT/THB trading pair being the most popular. In 2025, Thailand's banking sector froze 3 million bank accounts as part of efforts to crack down on nominee accounts, grey capital, and suspicious activities. (Cointelegraph).