U.S. Charges Suspect in $54M Uranium Finance Exploit as DeFi Crackdown Intensifies

$54M Uranium exploit case signals rising U.S. enforcement pressure on DeFi hacks and illicit crypto flows.

Federal prosecutors have charged a Maryland man with exploiting a pair of vulnerabilities that drained millions from a decentralized crypto exchange. The case centers on attacks against Uranium Finance in 2021 that forced its shutdown. Authorities say the suspect manipulated smart contracts to siphon funds and later laundered the proceeds. If convicted, he could face decades behind bars.

Indictment Reveals Timeline of $54M Uranium Finance DeFi Exploit

Prosecutors in the Southern District of New York allege that Jonathan Spalletta, 36, carried out two separate attacks on Uranium Finance. An indictment filed on Monday charges him with one count of computer fraud and one count of money laundering. The charges carry a combined maximum sentence of up to 30 years.

According to the filing, the first exploit occurred in April 2021. Spalletta allegedly executed a sequence of deceptive transactions within the platform’s smart contracts. That maneuver allowed him to withdraw more rewards than he was entitled to receive. Authorities say he drained roughly $1.4 million from the liquidity pool during that incident.

“As alleged, Jonathan Spalletta repeatedly hacked smart contracts to steal millions of dollars worth of other people’s money for himself, and destroyed a cryptocurrency exchange in the process,” Attorney Jay Clayton stated in a statement. 

Weeks later, prosecutors claim he exploited another vulnerability in the protocol’s code. This second attack proved far more damaging, with losses totaling about $53.3 million. The scale of the breach left Uranium Finance unable to continue operations, leading to its closure.

Prosecutors Reject ‘Fake Internet Money’ Defense in Major DeFi Exploit Case

U.S. Attorney Jay Clayton stated that the defendant repeatedly hacked smart contracts and took funds belonging to other users. He added that calling cryptocurrency “fake internet money” does not change the nature of the alleged crime.

Investigators also allege that Spalletta laundered the stolen assets through various means. Funds were reportedly used to acquire high-value collectibles, including rare Pokémon and Magic: The Gathering cards. Purchases also included a historic artifact linked to the Apollo 11 Moon Landing, according to prosecutors.

Law enforcement has already recovered a portion of the stolen assets. Authorities said in February last year that they seized about $31 million tied to the earlier exploit. The case adds to a growing list of enforcement actions targeting crypto-related hacks and illicit financial flows.