From Black Lotus to Big House: Maryland Man Charged for Alleged $50M Uranium Finance Heist

Jonathan Spalletta, 36, of Rockville, Maryland, has been charged with computer fraud and money laundering for allegedly draining over $50 million from decentralized exchange Uranium Finance in 2021, causing the platform to shut down. Because apparently when your protocol name literally screams "volatile and potentially explosive," some degens take that as a challenge.

The indictment, unsealed in the Southern District of New York, describes a two-part exploit. On April 8, 2021, Spalletta allegedly manipulated Uranium's rewards-tracking bug to siphon approximately $1.4 million. He later negotiated what prosecutors call a sham "bug bounty" to retain roughly $386,000 of the stolen funds. Yes, you read that right—while most developers submit bug reports through official channels, this guy submitted his via "wallet drain and hope they don't notice."

Prosecutors say he bragged to an associate: "I did a crypto heist… Crypto is all fake internet money anyway." Classic. The man allegedly stole millions in actual money while philosophically dismissing the entire asset class. Peak degen energy, except the only rug he was pulling was on the federal government.

On April 28, 2021, Spalletta allegedly exploited a separate smart contract flaw across 26 liquidity pools, extracting approximately $53.3 million in various cryptocurrencies. Because apparently $1.4 million wasn't enough to satiate whatever financial hunger this guy was running on. Some people check their portfolio twice a day. This guy checked 26 liquidity pools and decided "yes, this is my new retirement fund."

Authorities allege he laundered roughly $26 million through Tornado Cash between April 2021 and November 2023, moving funds across multiple blockchains to obscure their origin. The stolen proceeds were then converted into an eclectic collection of high-value collectibles, including a Black Lotus Magic: The Gathering card for about $500,000, 18 sealed Alpha booster packs for roughly $1.5 million, first-edition Pokémon sets worth over $1 million, and a Roman "Eid Mar" coin commemorating Julius Caesar's assassination for approximately $601,500. Nothing says "I definitely didn't steal this money" quite like buying nerdy treasures that make you look like the protagonist of a heist movie who just couldn't resist the one最后一个 fancy collectible.

Federal agents seized approximately $31 million in cryptocurrency linked to the scheme in February 2025. That's roughly $22 million in collectibles the government still has to figure out how to auction off while explaining to taxpayers why they're now holding a Roman coin that killed a dictator's reputation for being authentic.

Spalletta surrendered