Jonathan Spalletta was convicted of stealing $53.3 million from Uranium Finance in a cyberattack, according to a Justice Department announcement from the U.S. Attorney's Office for the Southern District of New York on October 7, 2026.
Spalletta, a cybersecurity consultant, gained access to the decentralized finance platform's systems and transferred the funds without authorization. He then spent portions of the stolen cryptocurrency on physical collectibles, including rare Pokémon and Magic trading cards, a Roman coin marking Julius Caesar's assassination, and fabric flown to the moon aboard the Wright brothers' aircraft.
Uranium Finance is a decentralized exchange platform that allows users to trade cryptocurrency assets. The theft occurred through a compromise of the platform's infrastructure, which Spalletta exploited given his background in information security. His conviction carries potential penalties including restitution and significant prison time.
Spalletta purchased collectible cards, numismatic coins, and historically significant artifacts with proceeds from the theft. Such purchases require legal title transfers and market authentication before law enforcement can seize them, extending recovery timelines beyond those for on-chain asset freezes.
The case ranks among the largest single-actor theft convictions in the decentralized finance space. Uranium Finance joins Curve Finance, Balancer, and Nomad Bridge as DeFi platforms that have suffered security breaches resulting in tens of millions in losses.
Spalletta's conviction follows a two-year investigation that traced his cryptocurrency movements and identified purchases across multiple jurisdictions and asset classes. Law enforcement recovered a portion of the stolen funds through asset seizure.
The recovery of stolen crypto assets from collectible purchases faces procedural obstacles distinct from tracing blockchain transactions. The number that decides next proceedings is whether Spalletta's sentencing hearing, currently scheduled for December 2026, will include a restitution order tied to the full $53.3 million figure or a reduced amount reflecting only recoverable assets.
