$54M Crypto Hack Nets Maryland Man 30-Year Charge
Federal prosecutors say a Maryland man who stole greater than $54 million from a crypto trade blew a good portion of the cash on Pokémon playing cards, vintage Roman cash, and a scrap of cloth from the Wright brothers’ airplane.
A Hacker With An Unusual Shopping List
Jonathan Spalletta surrendered to authorities Monday after the US Attorney’s Office for the Southern District of New York unsealed an indictment in opposition to him. Agents who searched his dwelling discovered the collectibles. The objects had been seized. Spalletta now faces as much as 30 years in jail if convicted on all fees — one depend of pc fraud and one depend of cash laundering.
The case facilities on two separate assaults in opposition to Uranium Finance, a now-defunct crypto trade that operated on the BNB blockchain. Both hacks occurred in April 2021, simply weeks aside, and collectively they worn out tens of thousands and thousands of {dollars} in consumer funds. The platform by no means recovered.
“Stealing from a crypto trade is stealing – the declare that ‘crypto is totally different’ doesn’t chang that,’” stated U.S. Attorney Jay Clayton. “For the victims, there’s nothing totally different about having your cash taken.”https://t.co/jSaPJ0F5LR pic.twitter.com/TbQ1mLfOYp
— US Attorney SDNY (@SDNYnews) March 30, 2026
The first assault, on April 8, was comparatively minor by crypto-crime requirements. A nasty actor exploited a sensible contract flaw and walked away with $1.4 million. The two sides ultimately reached a personal settlement, and all however $386,000 was returned. Then, 20 days later, Spalletta allegedly got here again for extra.
The Second Strike Killed The Platform
The April 28 assault was on one other stage. According to prosecutors, Spalletta exploited a coding error in Uranium Finance’s withdrawal system, hitting 26 separate liquidity swimming pools in a single sweep. He made off with $53.3 million in Bitcoin, Ether, and the platform’s personal U92 token. The trade shut down shortly after. Victims had been left with little info and no recourse.
Uranium Finance had launched simply days earlier than the primary hack, through the 2021 bull market. It was constructed as a fork of Uniswap, a well known automated buying and selling protocol. The platform by no means received an opportunity to develop. By the top of April, it was gone.
Federal investigators labored the case for years behind the scenes. In early 2025, authorities recovered $31 million in cryptocurrency tied to the hack however provided no public clarification on the time. Monday’s indictment stuffed within the particulars.
US Attorney Draws A Hard Line On Crypto Theft
US Attorney Jay Clayton made clear his workplace views crypto theft the identical as some other monetary crime. “Stealing from a crypto trade is stealing,” Clayton stated. “For the victims, there’s nothing totally different about having your cash taken.” He added that Spalletta prompted actual losses for actual folks and is now beneath actual arrest.
Spalletta appeared earlier than US Magistrate Ona Wang on Monday to formally hear the costs. Data from the broader crypto business places the 2021 hack in context — unhealthy actors stole an estimated $2.6 billion by means of numerous exploits that yr alone. The greatest was a $610 million breach of the Poly Network, although the hacker in that case ultimately returned the funds.
The Uranium Finance victims have waited practically 5 years for solutions. Monday’s indictment was a begin.
Featured picture from Unsplash, chart from TradingView
