South Korean prosecutors arrested and indicted the operators behind a token project called Catfi, marking the country's first criminal prosecution of a rug pull tied to a decentralized exchange. The case, brought under the Virtual Asset User Protection Act that went into effect in July 2024, accuses the group of market manipulation after 256 investors lost 900 million won — about $586,000 — when liquidity was drained following an artificial price surge.
The Catfi Scheme
The scheme kicked off on Pump.fun in early 2025. The main suspect, identified only by the surname Park and who operated online as the influencer 'Eth Father', created Catfi. Park allegedly posed as an unrelated third party to recommend purchases, inflated follower counts, ran the project's social accounts, and spread tokens across multiple wallets while using circular trading to hide who really controlled the supply.
Catfi's price exploded 1,001-fold within 26 hours of issuance. Around 6,000 investors bought in before the liquidity vanished. Investigators say the group used roughly 10 million won in criminal funds and walked away with 400 million won — about $260,000 — in proceeds.
How the Investigation Unfolded
Prosecutors from the Seoul Southern District Prosecutors' Office identified circular trading patterns and coordinated wash trades across wallets controlled by the issuing group. Using on-chain forensics, they traced the off-ramp through centralized exchanges that require know-your-customer checks. Two suspects were arrested and indicted for market manipulation; one was indicted without detention. Two others face charges for helping the main suspect flee.
This is the second known matter under the Virtual Asset User Protection Act, following the January 2025 ACE token manipulation case on Bithumb. But this one is the first to reach into a decentralized exchange environment.
Impact on DeFi Regulation in South Korea
The Catfi case shows that South Korea's crypto regulation has moved beyond exchange oversight and into on-chain conduct. Prosecutors are signaling that operators can't assume decentralization means immunity. The use of on-chain forensics and KYC-linked off-ramps suggests authorities are building the tools to trace even pseudonymous schemes.
Questions remain about how far the law will reach. The Virtual Asset User Protection Act is still young, and the ACE case was a centralized exchange matter. Catfi tests whether the same rules apply when the action happens entirely on a DEX. For now, the arrests send a clear message: DeFi isn't a free zone.
