Maryland Consultant Convicted in Major Cryptocurrency Fraud Case

Jonathan Spalletta, a 36-year-old cybersecurity consultant from Maryland, has been found guilty of significant computer fraud and money laundering, with losses exceeding $50 million stemming from stolen cryptocurrency. The announcement was made by the U.S. Department of Justice on Wednesday.

Details of the Case

Spalletta exploited vulnerabilities in the coding of the now-defunct crypto exchange, Uranium Finance, which facilitated trading through liquidity pools. His illegal activities commenced on April 8, 2021, when he first hacked the platform, enabling him to withdraw about $1.4 million by manipulating smart contracts.

“I did a crypto heist of $1.5MM a couple of weeks ago . . . There was a bug in a smart contract, and I exploited it . . . Crypto is all fake internet money anyway,” Spalletta documented in a written communication.

Following the initial theft, Spalletta coerced Uranium Finance into permitting him to retain approximately $386,000 as a “bug bounty” in exchange for returning the remaining stolen funds. On April 28, 2021, he executed a second hack, which capitalized on another coding error and resulted in the theft of about $53.3 million. The aftermath led to the complete shutdown of Uranium Finance due to financial depletion.

Use of Stolen Funds

In a striking twist, Spalletta utilized portions of the illicit gains to purchase high-value collectibles, including:

• A “Black Lotus” Magic: The Gathering card for approximately $500,000
• 18 sealed “Alpha Booster” Magic packs totaling about $1.5 million
• A sealed first-edition Pokémon booster box for around $257,500
• A complete first-edition Pokémon base set for about $750,000

Additionally, he acquired a piece of fabric from the original Wright brothers’ airplane, which was later taken to the Moon by Neil Armstrong, for around $137,500. He also spent $601,545 on an ancient Roman coin known as the “Eid Mar Denarius,” commemorating Julius Caesar’s assassination.

Legal Consequences

In February 2025, authorities managed to seize roughly $31 million in cryptocurrency that belonged to Spalletta. He has been convicted of one count of computer fraud, which carries a potential maximum sentence of ten years in prison, and one count of money laundering, with a maximum penalty of 20 years. The actual sentencing will be determined by a judge next year.

U.S. Attorney for the Southern District of New York, Jamie McDonald, noted the serious impact of Spalletta’s actions: “Spalletta’s crimes cost real people to lose real money—over $50 million dollars—and caused an entire crypto platform to collapse.”