Uranium Finance hacker convicted over $50 million theft

• A US jury convicted Jonathan Spalletta over two attacks on crypto platform Uranium Finance in 2021.
• The attacks resulted in more than $50 million in stolen cryptocurrency.
• Prosecutors said Spalletta used some proceeds to buy rare Pokémon and Magic: The Gathering cards.

A New York jury has found Jonathan Spalletta guilty of computer fraud and money laundering following a six-day trial.

Spalletta exploited Uranium Finance’s smart contracts in April 2021, stealing approximately $1.4 million before a second attack yielded $53.3 million.

“As a unanimous Manhattan jury has found, Jonathan Spalletta repeatedly exploited vulnerabilities in the code of a decentralized cryptocurrency platform to steal tens of millions of dollars,” US Attorney Jamie McDonald said in a statement.

The second attack drained multiple liquidity pools, leaving Uranium Finance without sufficient funds to continue operating. laundered the stolen cryptocurrency through multiple transactions, including transfers involving the Tornado Cash mixer.

Prosecutors said he spent some proceeds on rare collectibles, including a Black Lotus Magic: The Gathering card costing approximately $500,000.

Authorities seized cryptocurrency worth approximately $31 million in February 2025, while Spalletta faces maximum potential sentences of 10 years for computer fraud and 20 years for money laundering.

Spalletta’s conviction closes the trial phase, but a judge will determine his sentence.