Jury Convicts Hacker in $55 Million Uranium Finance Exploit, Sentencing Looms

A cybersecurity consultant stands convicted for orchestrating one of the year's major crypto heists. Jonathan Spalletta was found guilty by a New York jury for his role in stealing approximately $55 million from the Uranium Finance decentralized trading platform.

The Two-Pronged Attack That Toppled a Platform

Court documents reveal Spalletta executed two separate attacks against Uranium Finance in 2021. The financial drain from these exploits was so severe it forced the platform to cease operations shortly after. The jury returned its guilty verdict after just over two hours of deliberation.

Prosecutors secured the conviction primarily on money laundering charges, emphasizing Spalletta's use of cryptocurrency mixing services to obscure the trail of stolen funds. This charge carries a maximum penalty of 20 years imprisonment. U.S. District Judge Jed Rakoff has scheduled sentencing for February 16.

A Trove of Unusual Assets Seized

The investigation uncovered a bizarre portfolio of assets purchased with the illicit gains. During a search of Spalletta's Maryland residence, authorities seized:

  • Rare Pokémon and Magic: The Gathering trading cards valued at over $3 million
  • Cryptocurrency assets worth approximately $31 million

His spending habits were equally extraordinary. Prosecutors detailed how Spalletta paid more than $600,000 for an ancient Roman coin commemorating Julius Caesar's assassination. In another lavish purchase, he acquired a fragment of the original Wright brothers flyer that had been carried to the moon by Neil Armstrong, spending $137,000 on the historic artifact.

The Defense's Argument: Exploit vs. Authorized Function

Spalletta's defense team presented a contrasting narrative at trial. They argued his actions did not constitute hacking in the traditional sense. According to the defense, he merely utilized publicly accessible functions within the platform's smart contracts, without forging credentials or deploying malicious code.

The jury's verdict, however, sided with the prosecution's broader view of the crime. It established that the unauthorized extraction of funds and subsequent systematic obfuscation through mixing services constituted fraud and money laundering, regardless of the technical methodology. This case sets a significant precedent for interpreting legal responsibility within the decentralized finance landscape.