A New York jury has convicted cybersecurity consultant Jonathan Spalletta of stealing nearly US$55 million in cryptocurrency. The theft occurred during two attacks in 2021 against Uranium Finance, a crypto exchange that subsequently shut down. Spalletta faces up to 20 years in prison on a money-laundering charge related to his use of crypto mixers like Tornado Cash. His sentencing is scheduled for February 16, 2027.
The case gained attention due to Spalletta's spending habits. Prosecutors revealed that he used the stolen funds to buy rare Pokemon and Magic: The Gathering cards, an ancient Roman coin commemorating Julius Caesar's assassination, and a piece of the original Wright brothers Flyer that was carried to the moon. Authorities seized over US$3 million in collectibles and about US$31 million in cryptocurrency from his Maryland home.
Spalletta's defense argued that he did not hack the exchange but instead exploited publicly available functions in its smart contracts, rather than using malicious code or spoofed credentials. Despite this claim, the jury found him guilty after just over two hours of deliberation.