US Charges Collector Over $55 Million Crypto Hack
A US Department of Justice indictment has charged Jonathan Spalletta with exploiting Uranium Finance's smart contracts in April 2021, resulting in the theft of approximately $54.7 million in cryptocurrency.
The first alleged attack occurred on April 8, where Spalletta exploited weaknesses in withdrawal and rewards logic to extract cryptocurrency worth around $1.4 million. He repeated this sequence of transactions until he had drained nearly all the rewards tokens from the pool.
On April 28, prosecutors allege that Spalletta exploited a separate error affecting withdrawals across 26 Uranium liquidity pools, resulting in the theft of approximately $53.3 million in crypto.
The indictment describes how Spalletta laundered the stolen funds through Tornado Cash before using them to purchase various collectibles, including Pokémon cards, a Black Lotus Magic: The Gathering card, and a piece of fabric from the Wright brothers' original airplane.