A Maryland man has been charged with carrying out the 2021 hacks that drained more than $50 million from decentralized exchange Uranium Finance and forced the platform to shut down, the U.S. Department of Justice said Monday.
Jonathan Spalletta, 36, of Rockville, Maryland, faces one count of computer fraud and one count of money laundering, according to an indictment unsealed by the Southern District of New York. The charges follow a February 2025 seizure of approximately $31 million in crypto tied to the exploit, linking a years-old DeFi case to a named defendant for the first time.
The attack on Uranium Finance emptied key pools tied to BNB, BUSD and other assets and left Uranium unable to continue operating.
Prosecutors allege Spalletta first exploited Uranium’s rewards mechanism on April 8, 2021, draining roughly $1.4 million before later negotiating what authorities describe as a sham “bug bounty” that allowed him to keep about $386,000.
He later wrote to an associate, “I did a crypto heist … Crypto is all fake internet money anyway,” according to the indictment.
Authorities allege Spalletta laundered the proceeds through a series of transactions, including the use of crypto mixer Tornado Cash, before spending the funds on high-end collectibles.
Those purchases, according to the indictment, included a Black Lotus Magic: The Gathering card for about $500,000, 18 sealed Alpha booster packs for roughly $1.5 million, first-edition Pokémon sets worth over $1 million and a Roman “Eid Mar” coin commemorating the assassination of Julius Caesar for about $601,500.
Spalletta surrendered Monday and is expected to appear before a U.S. magistrate judge in Manhattan.
More For You
As stablecoins evolve into core financial infrastructure, North America leads. This report maps the regulation, market shifts, and players driving adoption.
Why it matters:
Stablecoins are entering their third phase of evolution – the institutionalization era – becoming increasingly embedded into core financial infrastructure. As institutions prioritize transparency and compliance, regulated issuers like USDC, RLUSD, and PYUSD are steadily gaining share with RLUSD surpassing $1B in market cap within its first year. North America, leading in regulatory frameworks and institutional distribution, is at the center of it all.
More For You
KuCoin operator Peken Global Limited cannot cater to U.S. users on its platform unless it registers as a foreign board of trade.
What to know:
Disclosure & Polices: CoinDesk is an award-winning media outlet that covers the cryptocurrency industry. Its journalists abide by a strict set of editorial policies. CoinDesk has adopted a set of principles aimed at ensuring the integrity, editorial independence and freedom from bias of its publications. CoinDesk is part of Bullish (NYSE:BLSH), an institutionally focused global digital asset platform that provides market infrastructure and information services. Bullish owns and invests in digital asset businesses and digital assets and CoinDesk employees, including journalists, may receive Bullish equity-based compensation.