U.S. Charges Jonathan Spalletta Over Alleged $53.3 Million Uranium Finance Hack
Summary
Jonathan Spalletta faces U.S. charges over alleged 2021 attacks that stole about $53.3 million from Uranium Finance. Authorities seized about $31 million in cryptocurrency and collectibles in 2025.
Key points
- The indictment alleges Spalletta attacked Uranium Finance twice in April 2021, forcing the exchange to shut down.
- The first attack allegedly exploited the AmountWithBonus variable to drain about $1.4 million from a liquidity pool.
- A separate one-character coding error allegedly let Spalletta withdraw nearly 90% of assets across 26 pools, worth about $53.3 million.
- The indictment alleges he laundered funds through Tornado Cash and spent proceeds on collectibles, including trading cards and a Roman coin.
- In 2023, investigator ZachXBT linked more than 11,200 ETH withdrawn from Tornado Cash to the Uranium hacker.
- Authorities seized collectibles and recovered about $31 million in cryptocurrency from linked wallets in February 2025.
- Spalletta faces up to 10 years for computer fraud and up to 20 years for money laundering if convicted.
Article Details
- Event Type
- Criminal charges following the alleged hacking and theft of funds from Uranium Finance.
- Impact
- Jonathan Spalletta allegedly stole approximately $53.3 million in two April 2021 attacks, forcing Uranium Finance to shut down. Prosecutors allege he laundered the proceeds through Tornado Cash and spent them on collectibles. Law enforcement seized approximately $31 million in cryptocurrency and collectibles in February 2025. Spalletta faces up to 10 years in prison on a computer fraud count and up to 20 years if convicted of money laundering.
People
Threat Actors
CthulhonOnline alias of Jonathan Spalletta, whom prosecutors allege hacked Uranium Finance and stole approximately $53.3 million.Jonathan SpallettaAllegedly hacked Uranium Finance twice in April 2021, stealing approximately $53.3 million, and laundered the proceeds. He has been charged; the allegations have not been established as convictions.JspallettaOnline alias of Jonathan Spalletta, whom prosecutors allege hacked Uranium Finance and stole approximately $53.3 million.
Products
BNB Smart Chain“Cthulhon” and “Jspalletta,” allegedly hacked the Uranium Finance automated market maker on Binance’s BNB Chain twice in April 2021, stealing approximately $53.3 million and forcing the exchange to shut down.Tornado CashHe then laundered the proceeds through Tornado Cash, spent funds on high-value collectibles, had assets and collectibles seized in 2025, and now faces charges including computer fraud and money laundering.Uranium FinanceJonathan Spalletta, known online as “Cthulhon” and “Jspalletta,” allegedly hacked the Uranium Finance automated market maker on Binance’s BNB Chain twice in April 2021, stealing approximately $53.3 million and forcing