Maryland Hacker Charged After Stealing $53M From Uranium

U.S. prosecutors have charged a Maryland man with stealing over $53 million after compromising the Uranium Finance crypto exchange twice and laundering proceeds through a cryptocurrency mixer. Jonathan Spalletta, 36, surrendered to law enforcement Monday and appeared before U.S. Magistrate Judge Ona T. Wang.

Spalletta, known online as “Cthulhon” and “Jspalletta,” hacked Uranium Finance in April 2021, stealing approximately $53.3 million in cryptocurrency. The decentralized automated market maker, similar in function to Uniswap, shut down permanently due to insufficient remaining funds.

According to the unsealed indictment, Spalletta “repeatedly hacked smart contracts to steal millions of dollars’ worth of other people’s money for himself, and destroyed a cryptocurrency exchange in the process.”

Spalletta faces federal charges including computer fraud and money laundering. A conviction on the computer fraud count carries up to 10 years imprisonment, while money laundering charges carry up to 20 years.

The case highlights ongoing vulnerabilities in decentralized finance platforms. Smart contract exploits remain a persistent threat to DeFi users and platforms, with attackers targeting code weaknesses to drain liquidity pools and user funds.

Uranium Finance’s collapse underscores critical gaps in DeFi security infrastructure. The exchange’s inability to recover from the hack demonstrates how catastrophic a single breach can be for emerging crypto platforms with limited reserves or insurance mechanisms.

Law enforcement coordination with cryptocurrency exchanges and blockchain analysis firms enabled tracking Spalletta’s laundering attempts through mixers, which obscure transaction origins. This prosecution signals increased federal focus on crypto crime investigations.

The specific technical vulnerabilities exploited remain unclear from available sources. Details about which mixer service Spalletta used and how much cryptocurrency was successfully laundered are not disclosed in court filings.

This case joins a growing list of major DeFi exploits, including other 2021 hacks totaling hundreds of millions, illustrating systemic security challenges facing decentralized finance platforms.

Follow Hashlytics on Bluesky, LinkedIn , Telegram and X to Get Instant Updates