Jonathan Spalletta, 36, of Rockville, Maryland, has been charged by federal prosecutors with computer fraud and money laundering in connection with a 2021 cyberattack that drained more than $50 million from the Uranium Finance decentralized exchange. The attack was severe enough to force the platform to permanently shut down. Spalletta surrendered to authorities in Manhattan following the charges.
The indictment marks the first time any defendant has been publicly connected to the long-running DeFi case. Prior to the charges being filed, authorities carried out a seizure in February 2025 of approximately $31 million in cryptocurrency linked to the exploit. That seizure represented a significant step in recovering funds lost during the attack.
According to prosecutors, Spalletta took advantage of a vulnerability in Uranium Finance’s rewards mechanism to carry out the theft. After obtaining the funds, he allegedly moved the proceeds through a series of complex cryptocurrency transactions designed to obscure their origin. Among the tools used in this process was Tornado Cash, a crypto mixing service.
Investigators say Spalletta used a portion of the stolen funds to purchase high-value rare collectibles. These acquisitions reportedly included a Black Lotus Magic: The Gathering card, first-edition Pokémon sets, and an ancient Roman coin. Such purchases are consistent with patterns seen in other cases where illicitly obtained digital assets are converted into physical goods of significant value.
The case highlights ongoing efforts by federal authorities to pursue individuals responsible for large-scale attacks on decentralized finance platforms. The charges of computer fraud and money laundering each carry substantial legal consequences. The successful linking of a suspect to a years-old DeFi exploit signals growing investigative capability in tracking cryptocurrency-based crimes.
Originally reported by CoinDesk.
