The U.S. Attorney's Office for the Southern District of New York has charged Jonathan Spalletta, a 36-year-old resident of Maryland, with stealing approximately $54 million from the decentralized exchange Uranium Finance. The case has drawn attention due to his unusual money laundering method—purchasing rare Pokémon and Magic: The Gathering cards.
Two Hacks: From $1.4M to $54M
According to the indictment, Spalletta carried out two separate attacks on Uranium Finance in 2021. In the first, he siphoned $1.4 million through fraudulent smart contract transactions. Shortly after, he exploited a protocol vulnerability to steal an additional $53.3 million, bringing the total to approximately $54.7 million. The attacks forced the exchange to shut down permanently.
Money Laundering via Collectibles and a Moon Artifact
Prosecutors allege that Spalletta laundered the stolen crypto through complex channels, eventually using the funds to acquire rare Pokémon cards, Magic: The Gathering cards, and a moon rock artifact. Some of these collectibles are valued at tens of thousands of dollars each. As of February 2025, authorities have already recovered about $31 million in crypto assets.
Legal Stakes: Up to 30 Years in Prison
Spalletta faces charges of computer fraud and money laundering. If convicted, he could face a maximum sentence of 30 years in federal prison. The trial is underway in the Southern District of New York, and prosecutors are continuing to trace the remaining stolen funds. The case underscores ongoing security vulnerabilities in DeFi protocols and the emerging trend of using alternative collectibles for money laundering.