Rockville Man Convicted for $50 Million Cryptocurrency Hack

A federal jury has found 36-year-old Jonathan Spalletta from Rockville guilty of charges related to a significant cybercrime involving a decentralized cryptocurrency exchange, resulting in the theft of more than $50 million in digital assets.

Background of the Case

The U.S. Attorney’s Office for the Southern District of New York announced the conviction after a comprehensive six-day jury trial held in Manhattan. Spalletta was held accountable for two hacking incidents against Uranium Finance, a cryptocurrency exchange, which occurred in April 2021.

The Hacking Incidents

On April 8, 2021, Spalletta executed his first hack, utilizing a sequence of transactions to siphon off approximately $1.4 million in cryptocurrency. In a message dated two weeks after the incident, he referred to his actions as a “crypto heist” and dismissed cryptocurrency as “all fake internet money anyway,” demonstrating a cavalier attitude towards his illegal activities.

Later that same month, Spalletta identified and exploited another vulnerability within Uranium’s code that affected multiple liquidity pools, allowing him to extract a staggering $53.3 million in cryptocurrency. The repercussions of his actions severely crippled the exchange’s financial viability, ultimately leading to its shutdown.

Laundering the Stolen Funds

Following the hacks, Spalletta engaged in a series of laundering transactions to obscure the origins of the stolen cryptocurrency. This included using a cryptocurrency mixer known as Tornado Cash.

Subsequent Purchases

Reports indicate that Spalletta utilized a portion of the illicitly gained funds to acquire high-value collectibles, including:

• A Black Lotus card from Magic: The Gathering, costing approximately $500,000
• Eighteen sealed Alpha Booster packs, purchased for over $1.5 million
• A first-edition Pokémon booster box, valued at about $257,500
• A complete first-edition Pokémon base set, acquired for roughly $750,000
• A fragment of fabric from the Wright brothers’ airplane, later taken to the moon by astronaut Neil Armstrong, purchased for around $137,500
• An ancient Roman coin commemorating Julius Caesar’s assassination, bought for more than $600,000

Seizure of Assets

In February 2025, federal authorities successfully seized approximately $31 million in cryptocurrency attributed to Spalletta’s actions during the Uranium hack.

Potential Sentencing

Spalletta faces serious consequences due to his convictions. He has been charged with one count of computer fraud, which carries a maximum penalty of 10 years in prison, and one count of money laundering, which could result in a maximum of 20 years. The final sentence will be determined by a federal judge.

This case highlights the ongoing challenges law enforcement faces in combating cybercrime within the rapidly evolving cryptocurrency landscape.