The fallout from one of 2021’s biggest decentralized finance breaches is no longer just a crypto story. It is now a federal criminal case.
US authorities have unsealed an indictment against Jonathan Spalletta, a Maryland resident accused of carrying out two exploits against Uranium Finance in April 2021. Prosecutors say the attacks drained more than $54 million in cryptocurrency and ultimately forced the platform to shut down. Spalletta has been charged with computer fraud and money laundering. If convicted on both counts, he faces a possible maximum sentence of 30 years in prison.
Announcing the case, US Attorney Jay Clayton made the government’s position clear. “Stealing from a crypto exchange is stealing—the claim that ‘crypto is different’ does not change that. For the victims, there is nothing different about having your money taken. Spalletta cost real victims real losses of tens of millions of dollars, and now he’s under real arrest,” he said.
Ogbonda Chivumnovu
What Happened to Uranium Finance
To understand the case, we have to go back to early 2021, when decentralized finance was booming. Uranium Finance launched in April as a fork of Uniswap on the BNB Chain. Like many automated market makers at the time, it allowed users to trade tokens through liquidity pools instead of traditional order books.
Just days after launch, on April 8, 2021, the platform suffered its first exploit. Prosecutors allege that Spalletta manipulated a flaw in the smart contract to withdraw far more rewards than he was entitled to, taking roughly $1.4 million worth of crypto. A partial recovery followed, but not all funds were returned.
Then came the second and far more damaging attack. On April 28, 2021, an alleged vulnerability in the protocol’s withdrawal logic was exploited across 26 liquidity pools. This time, around $53 million in digital assets was drained, including major tokens such as BNB and BUSD. The scale of the loss left Uranium Finance unable to continue operations. The website eventually went offline, and many users were left without clear answers.
Who Is Jonathan Spalletta?
According to court documents, Jonathan Spalletta, born around 1990 and based in Rockville, Maryland, operated online under several aliases. Investigators say he was deeply involved in crypto communities and understood how DeFi protocols worked at a technical level.
Prosecutors allege that after exploiting Uranium Finance, Spalletta worked to obscure the trail of funds. The indictment describes the use of token swaps and privacy-focused tools, including Tornado Cash and Monero, to complicate tracing efforts. At least $11 million of the stolen funds allegedly flowed directly to him.
Authorities say the money did not just sit in digital wallets. It was allegedly used to purchase high-value collectibles, including rare Pokémon cards, a Black Lotus Magic: The Gathering card, antique Roman coins, and even a piece of fabric from the Wright brothers’ airplane. During a search of his residence, law enforcement seized several of these items.
In February 2025, US authorities also seized roughly $31 million in cryptocurrency linked to the hack. The investigation involved the FBI and IRS Criminal Investigation, reflecting how seriously financial crime in the crypto space is now treated.
The Broader Context of 2021’s DeFi Boom and Bust
The Uranium Finance breach happened during a year when DeFi exploits were surging. In 2021 alone, hackers stole an estimated $2.6 billion across the crypto sector. One of the largest incidents was the $610 million Poly Network attack, though much of that was later returned.
At the time, many projects were launching quickly to capture investor interest. Code audits were sometimes rushed or incomplete. Smart contract bugs could be worth millions overnight. Uranium Finance became one of several cautionary tales from that period.
What makes this case different is that it has moved beyond anonymous wallet addresses and on-chain speculation. A named defendant now stands accused in federal court, and prosecutors are treating the alleged exploits like any other large-scale financial crime.
Spalletta was scheduled to appear before a federal magistrate judge to formally hear the charges. The case has been assigned to US District Judge Jed S. Rakoff. As it moves forward, prosecutors will need to show how the exploits were carried out and link the digital transactions directly to the defendant.
For the crypto industry, the message is becoming clearer. The idea that blockchain-based crimes are untouchable is fading. Investigators are increasingly able to trace complex transaction trails, seize digital assets, and bring cases years after the original exploit.
Kelechi Edeh
