Author
Ahmed Barakat
Author
Share
Solana News: Seoul Southern District Prosecutors’ Office has arrested and indicted five suspects in South Korea’s first-ever criminal case targeting a rug pull executed on a decentralized exchange.
The charges, brought under the Virtual Asset User Protection Act, which took effect in July 2024, cover market manipulation and fraud, with 256 investors losing a combined 900 million won ($600,000) after liquidity was drained from the CATFI token pool.
The case marks the first time South Korean authorities have applied the Act’s unfair-trading provisions to a DEX-based scheme, explicitly framing it as “the first legal prosecution of a crypto crime executed through a DEX.”
Suspects were arrested on May 11, 2026; all five were formally indicted by the Seoul Southern District Prosecutors’ Office on May 27, 2026.
The main suspect, identified by the surname Park, operated online as the influencer “Eth Father”, a fake persona constructed to manufacture organic-looking community interest in CATFI.
Park and four associates launched the meme coin on a Solana-based decentralized exchange, quietly pre-loading wallets with a dominant token position before the public promotion campaign began.
Using circular trading and coordinated wash trades across multiple wallets, the group pumped CATFI’s price 1,001-fold within 26 hours, attracting retail buyers before pulling the liquidity entirely.
The organizers pocketed approximately 400 million won ($260,000) in illegal profits, leaving 256 investors holding worthless positions.
Two suspects were arrested and indicted for market manipulation; one was indicted without detention; two others were charged for helping the main suspect evade authorities – one of whom allegedly spent three months in disguise to avoid arrest.
Discover: The Best Crypto to Diversify Your Portfolio
Solana News: South Korea CATFI Arrest and DeFi Regulation
DEXs have operated in a persistent regulatory blind spot across most jurisdictions, no centralized listing process, no mandatory issuer disclosure, and pseudonymous wallet structures that historically frustrated enforcement.
Before CATFI, South Korea’s Virtual Asset User Protection Act had been applied exclusively to centralized-exchange market abuse cases, including manipulation on Bithumb and the ACE token scheme. The CATFI prosecution is the first time those unfair-trading clauses have been tested against on-chain DEX conduct.
Prosecutors did not charge the group under unregistered exchange or token-listing statutes. Instead, they relied on traditional fraud and market-manipulation provisions within the User Protection Act, arguing that circular trading, fake influencer promotion, and deliberate misrepresentation of insider token control constitute “fraudulent means, plans, or techniques” in digital asset trading.
That legal theory is significant: it means prosecutors do not need a registered entity or a centralized platform to bring charges – conduct on-chain is enough.
Seoul Southern District prosecutors framed the enforcement mandate explicitly, stating the office would “resolutely deal with acts that disrupt the digital asset market and undermine public trust.”
The CATFI case does not exist in isolation. South Korea introduced five-minute reconciliation requirements and automated kill switches for crypto platforms earlier in 2026, alongside a new Digital Asset Act carrying a 100% reserve requirement for stablecoins.
Authorities also signaled in January a reconsideration of the country’s long-standing ban on spot bitcoin ETFs.
Against a backdrop of $110 billion in crypto outflows through 2025, regulators have been systematically closing the gap between DeFi activity and formal oversight, and as broader crypto regulatory frameworks evolve globally, South Korea’s enforcement posture is increasingly setting the pace for DeFi-specific cybercrime prosecution.
Discover: The Best Token Presales
How did They Trace Them?
Investigators built the CATFI case using wallet clustering to map insider token concentration, circular trading pattern analysis to identify wash-trade coordination across linked addresses, and off-ramp KYC intersection, the point at which pseudonymous wallets convert to fiat at a centralized exchange with identity verification requirements.
That off-ramp exposure point is the structural vulnerability in every DEX-based rug pull: operators can obscure their identity on-chain, but converting proceeds to fiat requires passing through a regulated gateway.
Online investigators initially identified the suspect wallets and filed complaints, but authorities temporarily closed the case after the group claimed they had been hacked.
The Financial Services Commission later re-referred the matter, prompting a renewed forensic investigation that brought in both financial and tax authorities to complete the chain of evidence. Additional details on the investigative timeline confirm the FSC’s re-referral was the turning point that unlocked the full forensic reconstruction.
Analysts frames the case as signaling the end of DEXs as an enforcement blind spot, noting that authorities are now mapping on-chain behavior, social promotion, and market manipulation into conventional prosecutorial theories. Pseudonymous branding and multi-wallet setups do not place a case beyond reach when combined with modern blockchain forensics and KYC off-ramp tracing.
DeFi regulation in South Korea has now moved from exchange oversight to on-chain conduct, and Solana meme coin operators who assumed decentralization meant immunity are reading that statement very carefully right now.
