South Korean authorities have arrested suspects connected to CatFi, a Solana-based memecoin, in what prosecutors describe as the country's first rugpull prosecution under its landmark Virtual Asset User Protection Act. The arrests, reported May 27, mark a significant expansion of how South Korean regulators are applying virtual asset protection law to decentralized token fraud.

---

Investigators allege the suspects created fake social media channels to artificially promote CatFi, drawing in thousands of investors before abandoning the project and disappearing with funds. A rugpull, for readers unfamiliar with the term, refers to a scheme where token developers hype a project, attract investment, then withdraw liquidity or simply walk away, leaving holders with worthless assets. The case is notable not just for the arrests but for the legal theory behind them: prosecutors applied South Korea's Virtual Asset User Protection Act (VAUPA), a law that came into force on July 19, 2024, and had not previously been used to target project-level abandonment fraud. The scale of investor losses in the CatFi case has not been publicly disclosed.

A New Law Gets Its Second Precedent

VAUPA is South Korea's first statute dedicated specifically to digital asset users. It prohibits unfair trading practices, including market manipulation and project abandonment schemes, and carries penalties of at least one year in prison plus fines of three to five times any illicit gains. All assets acquired through violations are subject to confiscation.

The law's first enforcement action came in November 2024, when a CEO was indicted roughly two months after investigation began for artificially inflating prices on a domestic exchange, in a case involving approximately $4.8 million in alleged artificial price inflation. The CatFi case now establishes a second category of precedent under the same statute: promotional fraud followed by deliberate project abandonment, a pattern that takes place off-exchange on a public blockchain rather than inside a regulated trading venue.

The Unit Behind the Arrests

The Seoul Southern District Prosecutors' Office runs a dedicated Joint Investigation Unit (JIU) for Virtual Asset Crimes, staffed by 35 full-time personnel including prosecutors and embedded regulators from the Financial Services Commission and Financial Supervisory Service. Since its formalization in 2024 (it originated as a task force in July 2023), the unit has indicted 74 individuals and arrested 25. The office has described its mandate as building "an effective crime response system through close cooperation with relevant organizations."

South Korea operates a two-track enforcement architecture. Alongside the 35-person JIU, the Financial Services Commission and Financial Supervisory Service maintain a combined team of 26 dedicated VAUPA investigators (9 at the FSC and 17 at the FSS), who work the regulatory side of enforcement in parallel with the prosecutors' office.

Solana's Fraud Problem in Numbers

CatFi was not an anomaly on Solana. According to research by Solidus Labs analyzing more than 7 million tokens on Pump.fun, Solana's dominant memecoin launchpad, approximately 98.6 percent collapse into rug pulls or pump-and-dump schemes. A separate analysis of 388,000 liquidity pools on Raydium, Solana's primary decentralized exchange, found that 93 percent showed signs of soft rugpulls, meaning developers withdrew funds abruptly after attracting liquidity. The median loss per incident was $2,832, though single events have reached $1.9 million. Solana's architecture, with sub-cent transaction fees and near-instant finality, makes it structurally attractive for launching fraudulent tokens at scale and exiting quickly.

Prosecutors in this case benefit from the same architecture that enabled the fraud. Solana's public ledger allows investigators to trace token issuance, pinpoint the exact block when liquidity was removed, and cluster wallets to establish intent. On-chain forensics have become a standard tool in South Korean crypto prosecutions. This traceability is especially relevant because memecoin developers frequently operate across borders. South Korea has already demonstrated willingness to pursue cross-border crypto cases through extradition coordination, most notably in the Do Kwon case, establishing a concrete precedent that Solana's pseudonymous environment does not guarantee immunity from prosecution.

What This Means Beyond Korea

The CatFi case has direct relevance for retail investors in South Asia and Africa, two regions with high informal participation in Solana-based memecoins, often accessed through Telegram and Discord communities. The promotional tactics alleged in the case, fake social accounts and influencer-style hype in private channels, are identical to patterns documented in scam ecosystems operating across India, Pakistan, Bangladesh, Nigeria, and Kenya.

None of those countries currently has VAUPA-style legislation that would allow prosecution specifically for rugpull mechanics on a decentralized chain. India's existing frameworks under the IT Act and SEBI regulations do not explicitly treat post-launch project abandonment as criminal fraud. Nigeria's Securities and Exchange Commission amended its rules in January 2025 to require prior approval for third-party token promoters, the closest regional analogue, but the provision does not reach developers who abandon projects after launch. In South Africa, the Financial Sector Conduct Authority levied R119 million in fines across 81 crypto-related investigations in 2025, signaling a regional shift toward active enforcement even without rugpull-specific statutes. Kenya's new VASP Act, signed in October 2025, and Nigeria's evolving framework under the Investment and Securities Act 2025 are the most plausible vehicles for future rugpull-specific provisions on the continent.

South Korea's approach is instructive for those drafting such laws: rather than waiting for bespoke rugpull legislation, prosecutors applied an existing "unfair trading practices" clause to the facts. That interpretive flexibility is a template regulators elsewhere can adapt without starting from scratch.

Because the CatFi case centers on fraud conducted through Telegram and Discord channels, it also raises an emerging question about platform evidence. Prosecutors seeking to establish intent and coordination may subpoena user data from Discord, Telegram, and X. That prospect could set precedent for how social platforms interact with crypto enforcement agencies going forward.

What Comes Next

South Korea is not slowing down. A Digital Asset Basic Act intended to extend VAUPA's reach to stablecoins, foreign virtual asset service providers, and cross-border flows was scheduled for introduction in the legislature in early 2026. The country's Financial Intelligence Unit received 36,684 suspicious transaction reports in just the first eight months of 2025. With roughly 16 million crypto users, about one-third of the population and among the highest per-capita adoption rates globally, South Korea has both the political incentive and the enforcement infrastructure to keep setting precedents.

That momentum arrives against a backdrop of worsening global losses. Crypto fraud cost investors approximately $6 billion in 2025, up sharply from the prior year, reinforcing why jurisdictions with developed enforcement infrastructure are accelerating rather than easing their efforts. For memecoin developers operating cross-border and targeting Korean retail participants, this case is a concrete signal that Solana's pseudonymous environment offers less protection than it once appeared to.

---

Sourcing note: Primary reporting on the CatFi arrests draws on a summary description of coverage by The Block, whose original article was inaccessible at the time of research due to a server error. No English-language press releases from the National Police Agency or Financial Services Commission specifically addressing the CatFi case were accessible at time of publication. Readers seeking official confirmation are encouraged to consult Korean-language sources from the Seoul Southern District Prosecutors' Office.