Cybersecurity consultant found guilty of stealing $55M in crypto from Uranium Finance

A Maryland cybersecurity consultant has been found guilty of stealing nearly $55 million in crypto, according to Bloomberg. The money came from Uranium Finance, a decentralized exchange that did not survive the experience. On October 7, 2026, a Manhattan federal jury convicted Jonathan Spalletta of computer fraud and money laundering. The jurors needed about two hours to reach their verdict. Two exploits, one collapsed exchange Spalletta, who went by the online aliases “Cthulhon” and “Jspalletta,” was tied to two separate attacks on Uranium Finance in 2021. Together, they drained more than $53 million in crypto assets and pushed the platform to shut down. The first hit landed on April 8, 2021. Spalletta took advantage of the exchange’s reward mechanism to walk away with about $1.4 million. The second came 20 days later, on April 28, and it was far worse. He exploited flaws spread across 26 liquidity pools to pull out approximately $53.3 million in crypto assets. After the April 28 attack, Uranium Finance ceased operations. The fallout also triggered a broad federal investigation into where the money went. From Tornado Cash to Black Lotus Prosecutors say a large share of the stolen ...