Critical Mass: Alleged $54M Uranium Finance Exploiter Faces 30 Years After Alleged Pokémon Card Spree

Prosecutors have unsealed an indictment against Jonathan Spalletta, a Maryland resident accused of hacking Uranium Finance—a now-defunct DeFi platform that hemorrhaged over $54 million across two exploits in April 2021. Spalletta surrendered to authorities on Monday. Apparently, going critical wasn't just a blockchain state for this guy—it became a life choice.

US Attorney Jay Clayton didn't mince words: "Stealing from a crypto exchange is stealing—the claim that 'crypto is different' does not change that. For the victims, there is nothing different about having your money taken." Clayton's nuclear energy pun potential here went tragically unexploited.

Uranium Finance launched as a BNB Chain fork of Uniswap during the bull market. Its website went dark after the second hack, leaving victims in the lurch ever since. Nothing says "we're here for the long term" like a website that vanishes faster than your liquidity in a rugged pool.

Two exploits, one catastrophic month

The platform suffered a $1.4 million hack on April 8, just days after launch. The attacker exploited a smart contract to withdraw far more rewards than authorized. A private deal saw most funds returned, with $386,000 still outstanding. Apparently, Uranium's tokenomics worked exactly as intended—for the attackers, at least.

Weeks later, on April 28, a second attacker—now identified as Spalletta—manipulated a contract error governing withdrawal limits across 26 liquidity pools. This time, $53.3 million walked out the door, including BTC, ETH, and the platform's native U92 tokens. When your token ticker literally means "uranium," maybe the radioactive price action should have been a red flag.

Apparently, wealth doesn't buy wisdom

Prosecutors allege Spalletta spent the loot on collectibles: Pokémon cards, antique Roman coins, and a piece of fabric from the Wright brothers' original airplane. Feds seized these items during a search of his residence. In February, authorities also recovered $31 million in cryptocurrency tied to the hack. This is what happens when you have $