Maryland Man Accused of Stealing $53,300,000 From Decentralized Crypto Exchange, Laundering Funds Through Tornado Cash: DOJ

A Maryland man has been charged with allegedly stealing more than $53 million from a decentralized cryptocurrency exchange and laundering the proceeds through Tornado Cash, according to the U.S. Attorney’s Office for the Southern District of New York. U.S. Attorney Jay Clayton announced that Jonathan Spalletta, also known as “Cthulhon” and “Jspalletta,” faces charges of computer fraud and money laundering tied to two 2021 hacks of Uranium Finance.

Prosecutors allege that in April 2021, Spalletta exploited vulnerabilities in Uranium’s smart contracts. In the first incident, he allegedly manipulated reward mechanisms to extract about $1.4 million in crypto. This initial theft was part of a series of exploits that targeted the platform’s decentralized nature, where smart contracts automatically execute transactions without the need for intermediaries.

In the second, more significant incident, Spalletta is accused of exploiting another flaw across 26 liquidity pools, stealing approximately $53.3 million and causing the platform to shut down. Liquidity pools are a common feature in decentralized exchanges, allowing users to provide liquidity in exchange for fees. The exploit allegedly involved manipulating these pools to drain funds into Spalletta’s own wallets.

After the thefts, authorities say Spalletta later laundered the stolen funds through complex transactions, including the use of Tornado Cash. Tornado Cash is a popular cryptocurrency mixing service that helps users obscure the origin of their transactions. By using such services, Spalletta attempted to make it difficult for authorities to trace the stolen funds.

U.S. Attorney Jay Clayton stated, “As alleged, Jonathan Spalletta repeatedly hacked smart contracts to steal millions of dollars’ worth of other people’s money.” Clayton added that the scheme resulted in “real losses of tens of millions of dollars.” The charges against Spalletta highlight the risks associated with decentralized finance, where vulnerabilities in smart contracts can be exploited by malicious actors.

Prosecutors also allege that Spalletta used the funds to purchase high-value collectibles, including rare trading cards and ancient coins. This suggests that Spalletta may have been motivated not only by financial gain but also by a desire to invest in unique and valuable items.

In February 2025, law enforcement seized approximately $31 million in cryptocurrency tied to the case. The seizure demonstrates the effectiveness of ongoing investigations and the ability of authorities to recover stolen assets in the digital space.

Spalletta, 36, faces up to 10 years in prison for computer fraud and up to 20 years for money laundering. Authorities noted that the charges are allegations and he is presumed innocent unless proven guilty. The case underscores the ongoing challenges faced by regulators and law enforcement in combating cryptocurrency-related crimes, as well as the need for improved security measures in decentralized finance platforms.

The investigation into Spalletta’s alleged activities is a reminder of the potential risks and rewards of the cryptocurrency ecosystem. While decentralized exchanges offer users the promise of increased security and transparency, they can also be vulnerable to exploitation by those with malicious intent. As the industry continues to evolve, it will be crucial for stakeholders to prioritize security and work closely with law enforcement to address emerging threats.