Verify a decision

{"actor":"system:backfill","investigation_id":"a413f833-2a80-456c-ada6-25e842508f0d","kind":"publish","page_slug":"jonathan-spalletta-uranium-finance-exploiter","published_at":"2026-07-01T23:13:21.291Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Jonathan Spalletta — Uranium Finance Exploiter","sections":[{"content":"On March 31, 2026, the U.S. Attorney's Office for the Southern District of New York unsealed an indictment (Case No. 1:26-cr-118) against Jonathan Spalletta, 36, of Rockville, Maryland. Spalletta surrendered to federal authorities in Manhattan on the same date and was arraigned before U.S. District Judge Jed S. Rakoff. He faces one count of computer fraud, carrying a maximum sentence of 10 years, and one count of money laundering, carrying a maximum sentence of 20 years, for a combined maximum exposure of 30 years imprisonment. The case is the first publicly named prosecution arising from the 2021 Uranium Finance exploits. U.S. Attorney Jay Clayton stated: 'Stealing from a crypto exchange is stealing — the claim that crypto is different does not change that.' Spalletta was released on bail following his arraignment. As of the writing of this entry, Spalletta is an active federal criminal defendant and all charges remain allegations.","heading":"Federal Indictment and Charges","severity":"critical","sources":[{"credibility":1,"name":"DOJ SDNY Press Release: Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks","type":"regulatory","url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"credibility":2,"name":"Inner City Press: SDNY Case 1:26-cr-118, Judge Rakoff, Spalletta Arraignment","type":"court_filing","url":"https://innercitypress.com/sdny229rakoffspallettaicp033026.html"},{"credibility":2,"name":"CoinTelegraph: Alleged Uranium Finance Hacker 54M DeFi Exploit Indictment","type":"news_article","url":"https://cointelegraph.com/news/alleged-uranium-finance-hacker-54m-defi-exploit-indictment"}]},{"content":"Prosecutors allege that on April 8, 2021, Spalletta (operating under the online handles 'Cthulhon' and 'Jspalletta') exploited a coding error in Uranium Finance's rewards mechanism, extracting approximately $1.4 million in cryptocurrency. Uranium Finance is described in court documents as a decentralized exchange and yield farming platform operating on the Binance Smart Chain (BSC) as a fork of Uniswap. Following the initial exploit, Spalletta allegedly engaged with the Uranium Finance team in bad faith, negotiating a settlement described by federal prosecutors as a sham 'bug bounty.' Under the alleged arrangement, Spalletta was permitted to retain approximately $386,000 while appearing to return the remainder, in exchange for what amounted to de facto immunity from the project. Prosecutors contend that Spalletta used this settlement as a deliberate mechanism to conceal the theft and avoid prosecution while retaining a portion of the stolen funds. Spalletta allegedly admitted his involvement to associates, stating words to the effect that 'crypto is just fake internet money anyway.'","heading":"First Exploit — April 8, 2021 ($1.4 Million)","severity":"critical","sources":[{"credibility":1,"name":"DOJ SDNY Press Release: Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks","type":"regulatory","url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"credibility":2,"name":"CoinDesk: Maryland man charged in $50 million Uranium Finance hack","type":"news_article","url":"https://www.coindesk.com/policy/2026/03/31/maryland-man-charged-in-usd50-million-uranium-finance-hack-after-u-s-seized-usd31-million-in-crypto"},{"credibility":2,"name":"The Record: US indicts Maryland man for 2021 theft of $54 million from Uranium Finance","type":"news_article","url":"https://therecord.media/us-indicts-maryland-man-54-million-crypto-theft"}]},{"content":"Approximately three weeks after the first exploit, on April 28, 2021, Spalletta allegedly executed a second and far larger attack against Uranium Finance. Prosecutors allege he exploited a separate arithmetic error in the smart contract governing withdrawal limits, enabling him to manipulate balance calculations across 26 separate liquidity pools on the BSC network. The attack extracted approximately $53.3 million in cryptocurrency assets including BNB, BUSD, and the platform's native U92 tokens. The exploit permanently rendered Uranium Finance insolvent, forcing the platform to shut down and leaving liquidity providers with unrecoverable losses. The total loss across both attacks is stated in the indictment as approximately $54.7 million. Blockchain analytics firm TRM Labs assisted law enforcement in tracing the stolen funds from the protocol through subsequent laundering steps back to Spalletta.","heading":"Second Exploit — April 28, 2021 ($53.3 Million)","severity":"critical","sources":[{"credibility":1,"name":"DOJ SDNY Press Release: Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks","type":"regulatory","url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"credibility":2,"name":"The Block: Maryland man charged in $54 million Uranium Finance hacks faces up to 30 years","type":"news_article","url":"https://www.theblock.co/post/395766/maryland-man-charged-54-million-uranium-finance-hacks-faces-30-years"},{"credibility":2,"name":"BleepingComputer: Hacker charged with stealing $53 million from Uranium crypto exchange","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hacker-charged-with-stealing-53-million-from-uranium-crypto-exchange/"},{"credibility":2,"name":"CryptoRank: Uranium Finance Hack — US Prosecutors Land Critical Indictment in $54M DeFi Exploit","type":"news_article","url":"https://cryptorank.io/news/feed/6e1f2-uranium-finance-hack-indictment"}]},{"content":"Federal prosecutors allege Spalletta undertook a multi-step laundering operation to obscure and convert the stolen cryptocurrency. The alleged laundering chain involved swapping stolen tokens into Ether, routing funds through Tornado Cash — a cryptocurrency mixing service that obscures transaction histories — and converting proceeds through exchanges and dealers. The indictment specifically cites Tornado Cash usage, consistent with the SDNY's continued focus on mixer-facilitated laundering following the August 2022 OFAC sanctions against Tornado Cash. Monero (XMR), a privacy-focused cryptocurrency, is also alleged to have been used in the laundering chain by queue intelligence associated with this case. Law enforcement collaborated with blockchain analytics firm TRM Labs to trace the fund flows despite the use of privacy tools, ultimately recovering approximately $31 million in linked cryptocurrency in February 2025.","heading":"Money Laundering — Tornado Cash, Monero, and Asset Conversion","severity":"critical","sources":[{"credibility":2,"name":"Inner City Press: SDNY Spalletta — Tornado Cash cited in indictment","type":"court_filing","url":"https://innercitypress.com/sdny229rakoffspallettaicp033026.html"},{"credibility":2,"name":"BanklessTimes: DOJ Alleged Uranium Finance Hacker Blew $54M On Pokemon Cards, Lunar Artifacts","type":"news_article","url":"https://www.banklesstimes.com/articles/2026/03/31/doj-alleged-uranium-finance-hacker-blew-54m-on-pokemon-cards-lunar-artifacts/"},{"credibility":2,"name":"The Record: US indicts Maryland man for 2021 theft of $54 million from Uranium Finance","type":"news_article","url":"https://therecord.media/us-indicts-maryland-man-54-million-crypto-theft"}]},{"content":"In February 2025, more than a year before the public indictment, the U.S. Attorney's Office for the Southern District of New York and Homeland Security Investigations (HSI) executed a major asset seizure, recovering approximately $31 million in cryptocurrency alleged to be linked to the Uranium Finance exploits. The seizure preceded the public unsealing of the indictment by approximately 13 months, suggesting a protracted covert investigation. The recovered amount represents approximately 57 percent of the total alleged theft. The indictment was subsequently unsealed on March 31, 2026. Multiple high-value physical collectibles purchased with alleged proceeds were also reportedly seized as part of the investigation.","heading":"Asset Seizure — February 2025","severity":"high","sources":[{"credibility":1,"name":"DOJ SDNY Press Release: Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks","type":"regulatory","url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"credibility":2,"name":"CoinDesk: Maryland man charged in $50 million Uranium Finance hack","type":"news_article","url":"https://www.coindesk.com/policy/2026/03/31/maryland-man-charged-in-usd50-million-uranium-finance-hack-after-u-s-seized-usd31-million-in-crypto"}]},{"content":"Federal prosecutors allege that Spalletta spent a substantial portion of the laundered proceeds on high-value physical collectibles. Alleged purchases include: a rare 'Black Lotus' Magic: The Gathering card valued at approximately $500,000; eighteen sealed Alpha booster packs of Magic: The Gathering cards totaling approximately $1.5 million; multiple first-edition Pokemon sets totaling more than $1 million; a rare Roman 'Eid Mar' coin commemorating the assassination of Julius Caesar, purchased for approximately $601,500; and a piece of fabric from the Wright brothers' original airplane, which was allegedly flown to the moon by astronaut Neil Armstrong on Apollo 11, described in reporting as a lunar artifact. These purchases are alleged to constitute proceeds of money laundering. The collectibles figure prominently in the government's narrative of the case and received widespread media coverage upon the indictment's unsealing.","heading":"Alleged Purchases of Luxury Collectibles","severity":"high","sources":[{"credibility":2,"name":"BanklessTimes: DOJ Alleged Uranium Finance Hacker Blew $54M On Pokemon Cards, Lunar Artifacts","type":"news_article","url":"https://www.banklesstimes.com/articles/2026/03/31/doj-alleged-uranium-finance-hacker-blew-54m-on-pokemon-cards-lunar-artifacts/"},{"credibility":2,"name":"CoinDesk: Maryland man charged in $50 million Uranium Finance hack","type":"news_article","url":"https://www.coindesk.com/policy/2026/03/31/maryland-man-charged-in-usd50-million-uranium-finance-hack-after-u-s-seized-usd31-million-in-crypto"},{"credibility":2,"name":"Tom's Hardware: Hacker charged for stealing $53 million in crypto, faces up to 30 years","type":"news_article","url":"https://www.tomshardware.com/tech-industry/cryptocurrency/hacker-charged-for-stealing-usd53-million-in-crypto-faces-up-to-30-years-in-prison-uranium-finance-thief-spent-usd2-million-of-illicit-funds-on-magic-the-gathering-usd1-million-on-pokemon-cards"},{"credibility":2,"name":"Help Net Security: Hacker stripped more than $50 million from Uranium crypto exchange, spent it on trading cards","type":"news_article","url":"https://www.helpnetsecurity.com/2026/03/31/uranium-finance-crypto-hack-man-charged/"}]},{"content":"The indictment identifies Spalletta by two online aliases: 'Cthulhon' and 'Jspalletta.' He is identified as a 36-year-old resident of Rockville, Maryland. No prior criminal history is cited in available public reporting. IQ.wiki maintains a biographical entry for Spalletta identifying him as a figure in the crypto space. Prosecutors alleged Spalletta made admissions to associates about the nature of the exploits, including the alleged statement 'I did a crypto heist … crypto is all fake internet money anyway.' The case is described in press coverage as the first publicly named prosecution in connection with the Uranium Finance exploits, which had remained unsolved for approximately five years before the indictment.","heading":"Online Identities and Background","severity":"medium","sources":[{"credibility":1,"name":"DOJ SDNY Press Release: Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks","type":"regulatory","url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"credibility":3,"name":"IQ.wiki: Jonathan Spalletta","type":"other","url":"https://iq.wiki/wiki/jonathan-spalletta"},{"credibility":2,"name":"Patch: MD Man Facing Federal Charges For Crypto Hack","type":"news_article","url":"https://patch.com/maryland/rockville/md-man-facing-federal-charges-crypto-hack"}]},{"content":"The April 28, 2021 exploit caused the permanent collapse of Uranium Finance. The platform was a BSC-based decentralized exchange and yield farming protocol operating as a fork of Uniswap. The $53.3 million drain across 26 liquidity pools left the protocol insolvent and unable to continue operations. Uranium Finance shut down shortly after the second exploit, citing critical vulnerabilities, and liquidity providers lost their deposited assets. The incident was widely covered in the blockchain security community at the time of occurrence in 2021, but no suspect was publicly identified until the March 2026 federal indictment. The protocol has not relaunched.","heading":"Impact on Uranium Finance","severity":"high","sources":[{"credibility":2,"name":"CryptoCurrency Times: U.S. Authorities Charge Hacker Behind $54M Uranium Finance Hack","type":"news_article","url":"https://www.cryptotimes.io/2026/03/31/u-s-authorities-charge-hacker-behind-54m-uranium-finance-hack/"},{"credibility":2,"name":"CryptoRank: Uranium Finance Hack — US Prosecutors Land Critical Indictment in $54M DeFi Exploit","type":"news_article","url":"https://cryptorank.io/news/feed/6e1f2-uranium-finance-hack-indictment"},{"credibility":3,"name":"Sonn Law Group: Investor Alert — Uranium Finance Collapse and Indictment Highlight Crypto Platform Risks","type":"other","url":"https://sonnlaw.com/investor-alert-uranium-finance-collapse-and-indictment-highlight-crypto-platform-risks-and-investor-exposure/"}]}],"sources_used":[{"credibility":1,"name":"DOJ SDNY Press Release: Maryland Man Charged With Defrauding Crypto Exchange Of Over $50 Million In Hacks","type":"regulatory","url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"credibility":2,"name":"CoinDesk: Maryland man charged in $50 million Uranium Finance hack after U.S. seized $31 million in crypto","type":"news_article","url":"https://www.coindesk.com/policy/2026/03/31/maryland-man-charged-in-usd50-million-uranium-finance-hack-after-u-s-seized-usd31-million-in-crypto"},{"credibility":2,"name":"The Record: US indicts Maryland man for 2021 theft of $54 million from Uranium Finance","type":"news_article","url":"https://therecord.media/us-indicts-maryland-man-54-million-crypto-theft"},{"credibility":2,"name":"The Block: Maryland man charged in $54 million Uranium Finance hacks faces up to 30 years","type":"news_article","url":"https://www.theblock.co/post/395766/maryland-man-charged-54-million-uranium-finance-hacks-faces-30-years"},{"credibility":2,"name":"BanklessTimes: DOJ Alleged Uranium Finance Hacker Blew $54M On Pokemon Cards, Lunar Artifacts","type":"news_article","url":"https://www.banklesstimes.com/articles/2026/03/31/doj-alleged-uranium-finance-hacker-blew-54m-on-pokemon-cards-lunar-artifacts/"},{"credibility":2,"name":"CoinTelegraph: US Charges Alleged Uranium Finance Hacker Over $54M DeFi Exploit","type":"news_article","url":"https://cointelegraph.com/news/alleged-uranium-finance-hacker-54m-defi-exploit-indictment"},{"credibility":2,"name":"BleepingComputer: Hacker charged with stealing $53 million from Uranium crypto exchange","type":"news_article","url":"https://www.bleepingcomputer.com/news/security/hacker-charged-with-stealing-53-million-from-uranium-crypto-exchange/"},{"credibility":2,"name":"Inner City Press: SDNY Case 1:26-cr-118, Judge Rakoff, Spalletta Arraignment","type":"court_filing","url":"https://innercitypress.com/sdny229rakoffspallettaicp033026.html"},{"credibility":2,"name":"Tom's Hardware: Hacker charged for stealing $53 million in crypto, faces up to 30 years","type":"news_article","url":"https://www.tomshardware.com/tech-industry/cryptocurrency/hacker-charged-for-stealing-usd53-million-in-crypto-faces-up-to-30-years-in-prison-uranium-finance-thief-spent-usd2-million-of-illicit-funds-on-magic-the-gathering-usd1-million-on-pokemon-cards"},{"credibility":2,"name":"Help Net Security: Hacker stripped more than $50 million from Uranium crypto exchange, spent it on trading cards","type":"news_article","url":"https://www.helpnetsecurity.com/2026/03/31/uranium-finance-crypto-hack-man-charged/"},{"credibility":2,"name":"CryptoRank: Uranium Finance Hack — US Prosecutors Land Critical Indictment in $54M DeFi Exploit","type":"news_article","url":"https://cryptorank.io/news/feed/6e1f2-uranium-finance-hack-indictment"},{"credibility":2,"name":"Patch: MD Man Facing Federal Charges For Crypto Hack","type":"news_article","url":"https://patch.com/maryland/rockville/md-man-facing-federal-charges-crypto-hack"},{"credibility":2,"name":"MoCo Show: $53M Crypto Hack Leads to Charges Against Rockville Man","type":"news_article","url":"https://mocoshow.com/2026/04/02/53m-crypto-hack-leads-to-charges-against-rockville-man/"},{"credibility":3,"name":"Sonn Law Group: Investor Alert — Uranium Finance Collapse and Indictment","type":"other","url":"https://sonnlaw.com/investor-alert-uranium-finance-collapse-and-indictment-highlight-crypto-platform-risks-and-investor-exposure/"},{"credibility":3,"name":"IQ.wiki: Jonathan Spalletta","type":"other","url":"https://iq.wiki/wiki/jonathan-spalletta"}],"summary":"Jonathan Spalletta, age 36, of Rockville, Maryland, was indicted by the U.S. Attorney's Office for the Southern District of New York on March 31, 2026 for allegedly executing two separate smart contract exploits against Uranium Finance in April 2021, draining a combined approximately $54.7 million across 26 BSC liquidity pools. He is charged with one count of computer fraud and one count of money laundering, carrying a combined maximum sentence of 30 years. Federal prosecutors allege Spalletta laundered proceeds through Tornado Cash, converted funds into rare collectibles, and negotiated a fraudulent bug bounty following the first exploit to conceal his involvement.","timeline":[{"date":"2021-04-08","event":"First exploit of Uranium Finance: Spalletta allegedly exploits a coding error in the rewards mechanism, draining approximately $1.4 million in cryptocurrency.","source":"DOJ SDNY Press Release","source_url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"date":"2021-04-08","event":"Following the first exploit, Spalletta allegedly negotiates a sham bug bounty with Uranium Finance, retaining approximately $386,000 while appearing to cooperate with the project.","source":"CoinDesk","source_url":"https://www.coindesk.com/policy/2026/03/31/maryland-man-charged-in-usd50-million-uranium-finance-hack-after-u-s-seized-usd31-million-in-crypto"},{"date":"2021-04-28","event":"Second exploit of Uranium Finance: Spalletta allegedly exploits an arithmetic error in the withdrawal logic across 26 BSC liquidity pools, draining approximately $53.3 million and permanently shutting down the protocol.","source":"DOJ SDNY Press Release","source_url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"},{"date":"2021-04-28","event":"Uranium Finance shuts down, citing critical vulnerabilities; liquidity providers suffer total loss of deposited assets.","source":"The Block","source_url":"https://www.theblock.co/post/395766/maryland-man-charged-54-million-uranium-finance-hacks-faces-30-years"},{"date":"2025-02-01","event":"U.S. Attorney's Office SDNY and Homeland Security Investigations seize approximately $31 million in cryptocurrency linked to the Uranium Finance exploits, predating the public indictment by approximately 13 months.","source":"CoinDesk","source_url":"https://www.coindesk.com/policy/2026/03/31/maryland-man-charged-in-usd50-million-uranium-finance-hack-after-u-s-seized-usd31-million-in-crypto"},{"date":"2026-03-30","event":"Jonathan Spalletta is arrested and appears before a magistrate in New York; subsequently transferred for arraignment before U.S. District Judge Jed S. Rakoff.","source":"Inner City Press","source_url":"https://innercitypress.com/sdny229rakoffspallettaicp033026.html"},{"date":"2026-03-31","event":"SDNY indictment (Case No. 1:26-cr-118) unsealed against Spalletta; charged with one count of computer fraud and one count of money laundering. Spalletta surrenders in Manhattan and is released on bail.","source":"DOJ SDNY Press Release","source_url":"https://www.justice.gov/usao-sdny/pr/maryland-man-charged-defrauding-crypto-exchange-over-50-million-hacks"}]},"v":1}