Hacker Charged for $53 Million Uranium Finance Crypto Exchange Theft

Severity: High (Score: 66.0)

Sources: Bleepingcomputer, Infosecurity-Magazine, Theblock.Co, Decrypt.Co, Feeds2.Feedburner

Summary

Jonathan Spalletta, a 36-year-old Maryland man, has been charged with stealing over $53 million from the Uranium Finance crypto exchange through two hacks in April 2021. The first attack exploited a flaw in the exchange's smart contract, draining approximately $1.4 million. Spalletta later executed a second exploit that allowed him to withdraw nearly 90% of the assets across 26 liquidity pools, totaling $53.3 million, leading to the exchange's shutdown. He laundered the stolen funds using Tornado Cash and purchased high-value collectibles, including rare trading cards and historical artifacts. U.S. Attorney Jay Clayton emphasized that stealing from a crypto exchange is equivalent to traditional theft. Spalletta now faces up to 30 years in prison if convicted on charges of computer fraud and money laundering. Law enforcement has seized approximately $31 million in cryptocurrency linked to Spalletta's activities. Key Points: • Jonathan Spalletta charged with stealing over $53 million from Uranium Finance. • Exploited vulnerabilities in smart contracts to drain liquidity pools. • Faces up to 30 years in prison for computer fraud and money laundering.

Key Entities

• Data Breach (attack_type)
• Uranium Finance (company)
• Tornado Cash (tool)