Maryland man charged in $53 million Uranium Finance crypto heist

A 36-year-old Maryland man has been charged by U.S. prosecutors for allegedly orchestrating two sophisticated hacks against the Uranium Finance cryptocurrency exchange, resulting in the theft of over $53 million. Jonathan Spalletta, also known online as "Cthulhon" and "Jspalletta," surrendered to law enforcement after the charges were unsealed. The attacks led to the shutdown of the decentralized exchange, as reported by Bleeping Computer.

Spalletta is accused of exploiting vulnerabilities in Uranium Finance's smart contracts on two separate occasions in April 2021. The first attack, on April 8, involved manipulating a bonus variable to drain approximately $1.4 million. He then allegedly extorted the exchange for a portion of the stolen funds as a fake bug bounty. Three weeks later, on April 28, Spalletta reportedly exploited a coding error that allowed him to withdraw nearly 90% of the exchange's assets, totaling about $53.3 million. He allegedly laundered the stolen cryptocurrency through a mixer and used it to purchase high-value collectibles, including rare trading cards and an ancient Roman coin.

The U.S. Attorney's office emphasized that "crypto is different" does not excuse theft. Spalletta faces significant prison time for computer fraud and money laundering charges.

Source: Bleeping Computer