He Stole $55 Million in Crypto — Then Spent It on Pokémon Cards and a Roman Coin
Sometimes the most interesting part of a crypto heist isn't the hack itself. It's what the hacker did with the money afterward.
A Manhattan federal jury convicted cybersecurity consultant Jonathan Spalletta on October 7 for stealing nearly $55 million from Uranium Finance through two exploits in 2021 — an attack so severe it forced the platform to shut down entirely.
Here's the technical defense that didn't work: Spalletta's lawyers argued he only used publicly available smart contract functions, not malicious code or forged credentials, so it technically wasn't "hacking" in the traditional sense. The jury disagreed after just over two hours of deliberation.
What makes this case genuinely strange is the spending trail investigators found. Instead of cashing out quietly, Spalletta reportedly spent over $600,000 on an ancient Roman coin commemorating Julius Caesar's assassination, $137,000 on a Wright Brothers aircraft fragment, and accumulated rare Pokémon and Magic: The Gathering cards worth more than $3 million — all seized from his Maryland home alongside roughly $31 million in crypto assets.
The laundering method was fairly standard despite the unusual spending: about $26 million moved through Tornado Cash between April 2021 and November 2023, the crypto mixer that's become a recurring name in major theft cases.
He now faces up to 20 years in prison on the money laundering count alone, with sentencing set for February 2027. This case is a reminder that blockchain forensics and asset tracing have gotten good enough that even years-old, mixer-laundered crypto theft eventually catches up with people.
Does the eventual conviction here restore some confidence in crypto accountability, or does the fact it took over 4 years to prosecute concern you more? 👇
#CryptoSecurity #CryptoNews #zyverra #DeFi #Binance
Sometimes the most interesting part of a crypto heist isn't the hack itself. It's what the hacker did with the money afterward.
A Manhattan federal jury convicted cybersecurity consultant Jonathan Spalletta on October 7 for stealing nearly $55 million from Uranium Finance through two exploits in 2021 — an attack so severe it forced the platform to shut down entirely.
Here's the technical defense that didn't work: Spalletta's lawyers argued he only used publicly available smart contract functions, not malicious code or forged credentials, so it technically wasn't "hacking" in the traditional sense. The jury disagreed after just over two hours of deliberation.
What makes this case genuinely strange is the spending trail investigators found. Instead of cashing out quietly, Spalletta reportedly spent over $600,000 on an ancient Roman coin commemorating Julius Caesar's assassination, $137,000 on a Wright Brothers aircraft fragment, and accumulated rare Pokémon and Magic: The Gathering cards worth more than $3 million — all seized from his Maryland home alongside roughly $31 million in crypto assets.
The laundering method was fairly standard despite the unusual spending: about $26 million moved through Tornado Cash between April 2021 and November 2023, the crypto mixer that's become a recurring name in major theft cases.
He now faces up to 20 years in prison on the money laundering count alone, with sentencing set for February 2027. This case is a reminder that blockchain forensics and asset tracing have gotten good enough that even years-old, mixer-laundered crypto theft eventually catches up with people.
Does the eventual conviction here restore some confidence in crypto accountability, or does the fact it took over 4 years to prosecute concern you more? 👇
#CryptoSecurity #CryptoNews #zyverra #DeFi #Binance