Uranium crypto exchange hacker convicted for stealing $53 million
Maryland man convicted for stealing $53 million from Uranium crypto exchange.
Jonathan Spalletta was found guilty of hacking the decentralized crypto exchange Uranium Finance twice in April 2021, stealing over $53 million in cryptocurrency. He exploited smart contract flaws to drain liquidity pools and laundered the funds through Tornado Cash before purchasing various collectibles. Law enforcement recovered a significant portion of the stolen assets and collectibles.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Uranium Finance?
Get an email when a new story names Uranium Finance, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonJonathan Spalletta exploited critical vulnerabilities in Uranium Finance's smart contract code to drain over $53 million from liquidity pools across two separate attacks in April 2021. The root cause was unaudited or inadequately audited smart contract logic that failed to properly validate transaction integrity, allowing an attacker to manipulate pool balances. The fact that the exchange was attacked twice indicates a failure in incident response — the underlying vulnerability was not fully remediated after the first breach. This case underscores that decentralized finance (DeFi) platforms carry the same security obligations as traditional financial systems, and that deploying immutable code without rigorous auditing creates irreversible risk.
Indicators of Compromise
Extracted by AI from the linked source. Not reviewed by an editor. How this works
- malware — Tornado Cash