Maryland Man Accused of Stealing $53,300,000 From Decentralized Crypto Exchange, Laundering Funds Through Tornado Cash: DOJ

A Maryland man has been charged with allegedly stealing more than $53 million from a decentralized cryptocurrency exchange and laundering the proceeds through Tornado Cash, according to the U.S. Attorney’s Office for the Southern District of New York. U.S. Attorney Jay Clayton announced that Jonathan Spalletta, also known as “Cthulhon” and “Jspalletta,” faces charges of computer fraud and money laundering tied to two 2021 hacks of Uranium Finance.

Prosecutors allege that in April 2021, Spalletta exploited vulnerabilities in Uranium’s smart contracts. In the first incident, he allegedly manipulated reward mechanisms to extract about $1.4 million in crypto. This was followed by a second exploit, where Spalletta is accused of targeting another flaw across 26 liquidity pools, resulting in the theft of approximately $53.3 million. The second attack caused the platform to shut down, leading to significant losses for users.

Authorities claim that Spalletta later laundered the stolen funds through complex transactions, including the use of Tornado Cash, a popular cryptocurrency mixing service. Tornado Cash is designed to enhance user privacy by mixing and blending cryptocurrency transactions, making it difficult to trace the origin of funds. However, in this case, the service was allegedly used to obscure the trail of the stolen money.

U.S. Attorney Jay Clayton stated, “As alleged, Jonathan Spalletta repeatedly hacked smart contracts to steal millions of dollars’ worth of other people’s money.” He added that the scheme resulted in “real losses of tens of millions of dollars.” Prosecutors also allege that Spalletta used the funds to purchase high-value collectibles, including rare trading cards and ancient coins.

In February 2025, law enforcement agencies seized approximately $31 million in cryptocurrency tied to the case. The seizure highlights the effectiveness of ongoing investigations and the collaboration between different law enforcement agencies in tracking and recovering stolen assets.

Jonathan Spalletta, 36, faces up to 10 years in prison for computer fraud and up to 20 years for money laundering. The charges are allegations, and Spalletta is presumed innocent until proven guilty. The case underscores the risks associated with decentralized cryptocurrency exchanges and the importance of robust security measures to prevent such attacks.

The investigation into Spalletta’s alleged crimes is ongoing, and authorities are working to recover the remaining stolen funds. This case serves as a reminder of the challenges faced by cryptocurrency platforms in safeguarding user assets and the need for continuous improvement in smart contract security. As the cryptocurrency industry continues to grow, the potential for fraud and theft will likely increase, necessitating increased vigilance and collaboration between regulators, law enforcement, and the digital asset community.