• U.S. prosecutors linked Jonathan Spalletta to two Uranium Finance exploits in 2021.

  • The April 28 attack drained $53.3 million across 26 pools and shut the platform.

  • Federal agents seized $31 million as crypto exploits kept pressuring the sector.

U.S. authorities unsealed an indictment against Jonathan Spalletta, a Maryland resident accused of hacking Uranium Finance twice in April 2021 and draining more than $54 million. The U.S. Attorney’s Office for the Southern District of New York said he surrendered on Monday. Prosecutors charged him with computer fraud and money laundering, and they said he faces up to 30 years in prison.

Prosecutors Detail Two 2021 Exploits

The case centers on Uranium Finance, a BNB Chain fork of Uniswap that launched in April 2021 during the bull market. According to prosecutors, the platform lost funds in two separate attacks within weeks. First, on April 8, 2021, a bad actor exploited a smart contract flaw and withdrew far more rewards than allowed. The U.S. Attorney’s Office said that attack cost the platform about $1.4 million.

“Stealing from a crypto exchange is stealing – the claim that ‘crypto is different’ does not chang that,’” said U.S. Attorney Jay Clayton. “For the victims, there is nothing different about having your money taken.”https://t.co/jSaPJ0F5LR pic.twitter.com/TbQ1mLfOYp

— US Attorney SDNY (@SDNYnews) March 30, 2026

Later, Uranium Finance struck a private deal with the attacker. That agreement returned most of the funds, yet it let him keep about $386,000 as a fake bug bounty, according to prosecutors.

Then, on April 28, prosecutors said Spalletta exploited another smart contract error that governed withdrawal limits from liquidity pools. That second attack hit 26 separate pools and netted about $53.3 million in cryptocurrencies. As a result, Uranium Finance shut down after the catastrophic loss. Its website later went dark, and victims have had few answers since the exchange ceased operations.

Indictment Outlines Laundering Claims and Asset Seizure

According to the indictment, Spalletta moved the stolen funds through a complex chain of cryptocurrency transactions. Prosecutors said he also used Tornado Cash to obscure the money trail. Federal agents later seized about $31 million in cryptocurrency tied to the hack in February 2025. Authorities released no public details at that time, according to the text.

After that seizure, the criminal case moved forward. Spalletta, 36, of Rockville, Maryland, now faces one count of computer fraud and one count of money laundering. The press release said the computer fraud charge carries a maximum sentence of 10 years. It also said the money laundering charge carries a maximum sentence of 20 years.

He was due to appear before U.S. Magistrate Ona Wang on Monday to hear the charges. The Complex Frauds and Cybercrime Unit is prosecuting the case.

Read More: Hackers Frame “Bug Bounty” Prompts to Access Mexican Government Data

Officials Link The Case to Wider Crypto Crime Risks

U.S. Attorney Jay Clayton said Spalletta “exploited smart contracts to steal millions” from Uranium Finance and caused the exchange to shut down because it lacked funds. He added, “Stealing from a crypto exchange is stealing.” Clayton also said, “For the victims, there is nothing different about having your money taken.” He added that Spalletta caused “real victims real losses of tens of millions of dollars.”

How did prosecutors say one alleged attacker turn two smart contract flaws into one of 2021’s major DeFi losses? They said he paired the exploits with laundering tools and then spent part of the proceeds on rare collectibles and antique coins.

The charges arrived as crypto crime remained a persistent threat. PeckShield said crypto-related theft topped $4 billion in 2025, marking a 34% annual increase, while smart contract flaws accounted for a meaningful share.

The text also placed the Uranium Finance case within the broader 2021 wave of exploits. It said bad actors stole more than $2.6 billion through hacks and exploits that year, including the $610 million Poly Network attack.

The post U.S. Unseals Uranium Finance Hack Charges Against Suspect appeared first on Cryptotale.

The post U.S. Unseals Uranium Finance Hack Charges Against Suspect appeared first on Cryptotale.