Uranium Finance Hacker Convicted for $55 Million Theft

• •Jonathan Spalletta was convicted of stealing nearly $55 million from Uranium Finance.
• •The attacks occurred in April 2021, exploiting flaws in smart contracts.
• •Spalletta laundered funds through Tornado Cash and purchased rare collectibles.

Jonathan Spalletta, a cybersecurity consultant, was convicted by a New York jury for stealing nearly $55 million from Uranium Finance through two attacks in April 2021. The first attack exploited a flaw in the rewards mechanism, netting approximately $1.4 million, while the second attack targeted 26 liquidity pools, resulting in $53.3 million in losses. Spalletta laundered the stolen funds using Tornado Cash and spent significant amounts on rare collectibles, including Pokémon and Magic: The Gathering cards. The jury deliberated for over two hours before reaching a verdict on October 7, 2026. He faces a maximum of 20 years for money laundering and 10 years for computer fraud, with sentencing scheduled for February 16, 2027. Federal authorities seized $31 million in cryptocurrency and collectibles tied to the theft. Spalletta's defense argued that he exploited publicly available smart contract functions rather than hacking.