Finance & MarketsHigh Priority (8/10)Usa

U.S. Charges Jonathan Spalletta for $55 Million Uranium DeFi Hack

The U.S. Justice Department has charged Jonathan Spalletta with exploiting smart contract vulnerabilities to steal approximately $55 million from the Uranium DeFi cryptocurrency platform in 2021.

Key Points

  • Jonathan Spalletta charged for stealing approximately $55 million from Uranium DeFi
  • First hack on April 8, 2021 exploited reward distribution system for $1.4 million
  • Spalletta extorted platform for fake bug bounty and returned partial funds
  • Second exploit on April 28, 2021 led to platform shutdown

Full Details

Jonathan Spalletta, 36, of Rockville, Maryland, has been charged for allegedly exploiting smart contract vulnerabilities at the Uranium decentralized finance platform twice in 2021. The first hack occurred on April 8, 2021, when Spalletta exploited the protocol's reward distribution system to withdraw roughly $1.4 million in funds. He then extorted Uranium to allow him to keep approximately $386,000 as a fake bug bounty reward while returning roughly $1 million to the exchange. On April 28, 2021, Spalletta exploited another smart contract vulnerability to withdraw more funds than he should have been allowed to, in what was one of the largest DeFi cyber incidents at the time. The attack caused Uranium to shut down permanently.

Why It Matters

This case highlights the ongoing vulnerabilities in DeFi smart contracts and demonstrates that even years after an attack, the Justice Department continues to pursue cryptocurrency hackers, potentially serving as a deterrent to future bad actors.

Sourcesecurityweek.com

Get stories like this delivered daily

AI-curated news, personalized to your interests. Zero noise.

Start 7-Day Free Trial →

More in Finance & Markets