[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fTmB53slgfiSNYNaHNnTjTJAI4Lj5pFet6nxQ2AhrcqY":3},{"article":4,"iocs":49,"watch_terms":53,"solutions":54,"lesson":57},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":26,"category":27,"article_tags":31},"cb06dea1-4fd4-41a3-bdb2-88c4ded733c1","Uranium crypto exchange hacker convicted for stealing $53 million","uranium-crypto-exchange-hacker-convicted-for-stealing-53-million-e4d8f7","A Maryland man was found guilty of stealing more than $53 million after hacking the decentralized crypto exchange Uranium Finance twice in April 2021. [...]","Jonathan Spalletta was found guilty of hacking the decentralized crypto exchange Uranium Finance twice in April 2021, stealing over $53 million in cryptocurrency. He exploited smart contract flaws to drain liquidity pools and laundered the funds through Tornado Cash before purchasing various collectibles. Law enforcement recovered a significant portion of the stolen assets and collectibles.","Maryland man convicted for stealing $53 million from Uranium crypto exchange.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Furanium-crypto-exchange-hacker-found-guilty-of-53-million-theft\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2026\u002F10\u002F08\u002FBitcoin_cryptocurrency_theft.jpg","2026-10-08T13:18:36+00:00","2026-10-08T14:00:06.835854+00:00",7,[17,20,23],{"name":18,"type":19},"Jonathan Spalletta","threat_actor",{"name":21,"type":22},"Uranium Finance","product",{"name":24,"type":25},"BNB Chain","technology","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":26,"icon":28,"name":29,"slug":30},null,"Breaches","breaches",[32,34,39,44],{"category":33},{"id":26,"icon":28,"name":29,"slug":30},{"category":35},{"id":36,"icon":28,"name":37,"slug":38},"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5","Malware","malware",{"category":40},{"id":41,"icon":28,"name":42,"slug":43},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",{"category":45},{"id":46,"icon":28,"name":47,"slug":48},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[50],{"type":38,"value":51,"context":52},"Tornado Cash","Cryptocurrency mixer used for laundering stolen funds",[21],{"controls":55,"vendors":56},[],[],{"slug":58,"title":59,"body":60,"framework_refs":61,"framework_notes":71},"smart-contract-flaws-let-hacker-drain-53m-from-uranium-finance-twice","Smart Contract Flaws Let Hacker Drain $53M from Uranium Finance Twice","Jonathan Spalletta exploited critical vulnerabilities in Uranium Finance's smart contract code to drain over $53 million from liquidity pools across two separate attacks in April 2021. The root cause was unaudited or inadequately audited smart contract logic that failed to properly validate transaction integrity, allowing an attacker to manipulate pool balances. The fact that the exchange was attacked twice indicates a failure in incident response — the underlying vulnerability was not fully remediated after the first breach. This case underscores that decentralized finance (DeFi) platforms carry the same security obligations as traditional financial systems, and that deploying immutable code without rigorous auditing creates irreversible risk.",[62,63,64,65,66,67,68,69,70],"CIS Control 16 – Application Software Security","CIS Control 18 – Penetration Testing","NIST SP 800-53 SA-11 (Developer Testing and Evaluation)","NIST SP 800-53 SI-10 (Information Input Validation)","NIST CSF ID.RA-1 (Asset Vulnerabilities Identified)","NIST CSF RS.MI-1 (Incidents Contained)","OWASP Smart Contract Top 10 – SC01: Reentrancy \u002F Logic Errors","ITIL – Problem Management (root cause analysis and permanent fix)","FATF Guidance on Virtual Assets – Travel Rule & AML Controls",{}]