A Manhattan jury has convicted Jonathan Spalletta over two 2021 attacks on decentralized exchange Uranium Finance, in a case involving more than $50 million in stolen cryptocurrency, money laundering through Tornado Cash and purchases of high-value trading cards and historical collectibles.
According to Decrypt, Spalletta, 36, of Rockville, Maryland, was found guilty of computer fraud and money laundering after a six-day trial before U.S. District Judge Jed S. Rakoff. He was charged in March and convicted on all counts. The computer-fraud charge carries a maximum sentence of 10 years in prison, while money laundering carries a maximum of 20 years.
Two attacks on Uranium Finance
The first exploit took place on April 8, 2021. Prosecutors said Spalletta repeatedly interacted with Uranium’s smart contract, a program that automatically executes transactions on a blockchain, to withdraw substantially more rewards than he was entitled to receive. The attack netted about $1.4 million.
Spalletta later agreed to return most of that amount while keeping approximately $386,000. Prosecutors described the arrangement as a sham bug bounty rather than a legitimate reward for identifying a software vulnerability.
On April 28, he targeted a separate error involving the calculation of withdrawals across several liquidity pools. The second exploit yielded about $53.3 million and left Uranium Finance without enough funds to continue operating, forcing the platform to shut down.
U.S. Attorney Jamie McDonald said the conduct caused people to lose more than $50 million and led to the collapse of the crypto platform.
Crypto allegedly converted into collectibles
Prosecutors said Spalletta moved the stolen assets through multiple transactions, including transfers using Tornado Cash, a cryptocurrency mixer designed to obscure the movement of funds. He then spent part of the money on scarce cards and other collectibles.
His purchases included a Magic: The Gathering Black Lotus card for about $500,000 and 18 sealed Alpha Booster packs for approximately $1.5 million. His Pokémon purchases included a first-edition complete base set costing about $750,000 and a sealed first-edition booster box priced at roughly $257,500.
Other purchases included an Eid Mar denarius commemorating Julius Caesar’s assassination, bought for about $601,545, and a piece of fabric from the Wright brothers’ original airplane that Neil Armstrong carried to the Moon, purchased for approximately $137,500.
Authorities seized the Black Lotus, the fabric and some of the coins during a search of Spalletta’s home. They also seized cryptocurrency connected to the Uranium attacks that was worth about $31 million at the time of seizure in February 2025. Prosecutors have asked potential victims to contact Homeland Security Investigations.
Moneyiar market picture
Moneyiar data at 21:49 on October 8, 2026, showed the following prices and moves:
- Monad (MON): $0.0242847388, down 4.35% over 24 hours and 27.74% over seven days.
- Aethir (ATH): $0.0063279276, down 4.58% in 24 hours but up 8.77% over seven days.
- Collector Crypt (CARDS): $0.2510922422, down 6.79% in 24 hours and up 23.07% over seven days.
- Flow (FLOW): $0.0296045303, down 8.45% over 24 hours and 4.4% over seven days.
