Maryland Man Indicted for $54M DeFi Exploits

U.S. authorities unsealed an indictment on Monday charging Jonathan Spalletta, a Maryland resident, with computer fraud and money laundering in connection with two exploits that drained more than $54 million from Uranium Finance, a decentralized finance platform, in April 2021. The attacks, which targeted vulnerabilities in the platform's smart contracts, ultimately led to its shutdown, leaving users with significant losses.

Spalletta, also known by online aliases including Cthulhon and Jspalletta, surrendered to federal authorities on the same day and is scheduled to appear before a U.S. magistrate for arraignment. If convicted, he faces a maximum of 10 years in prison for the fraud count and 20 years for money laundering. Prosecutors from the U.S. Attorney's Office for the Southern District of New York allege that Spalletta carried out the first attack on April 8, 2021, shortly after Uranium Finance launched as a fork of the Uniswap automated market maker on the BNB Chain. He exploited a bug in the platform's rewards-tracking system, repeatedly draining a liquidity pool of approximately $1.4 million in cryptocurrency.

Authorities say Spalletta later negotiated a private...