Published 24 days ago • loading... • Updated 22 days ago
Uranium Finance Hacker Convicted over $55 Million Theft, Faces 20 Years
Jurors said he laundered the proceeds through Tornado Cash and spent some on rare trading cards and historical artifacts, prosecutors said.
On Wednesday, October 7, 2026, a Manhattan jury convicted cybersecurity consultant Jonathan Spalletta of computer fraud and money laundering for orchestrating two 2021 attacks on Uranium Finance that drained nearly $55 million in cryptocurrency.
Prosecutors detailed how Spalletta exploited smart contract rewards to steal approximately $1.4 million on April 8, 2021, then forced Uranium into accepting a "bug bounty" arrangement to keep $386,000 before a second attack drained $53.3 million.
Authorities seized more than $3 million in rare trading cards and approximately $31 million in cryptocurrency from Spalletta's Maryland residence after he laundered stolen proceeds through Tornado Cash to purchase collectibles including a Black Lotus card.
U.S. District Judge Jed Rakoff scheduled sentencing for February 16, with Spalletta facing a maximum of 10 years for computer fraud and up to 20 years for money laundering, the Justice Department said.
Victims of the Uranium Finance hack should contact Homeland Security Investigations for assistance, the Justice Department announced, as the platform's collapse left users without access to their funds following the 2021 breach.
A cybersecurity consultant was found guilty of stealing nearly $55 million in cryptocurrencies and spending part of the money on rare letters from Pokémon.