Uranium Finance 2026 Verdict: Spalletta Convicted Over $50M
A federal jury in Manhattan convicted cybersecurity consultant Jonathan Spalletta, also known as “Cthulhon” and “Jspalletta,” of computer fraud and money laundering related to two attacks against the decentralized exchange Uranium Finance in April 2021. The U.S. Attorneys Office for the Southern District of New York announced the decision on October 7, 2026, after a six-day trial before Judge Jed S. Rakoff. The conviction is a new legal milestone for a years-old exploit, not a fresh October 2026 smart-contract theft. It also has a stronger evidentiary status than an indictment: jurors convicted Spalletta on every count charged.Two distinct exploits, not one rounded headline April 8, 2021: prosecutors proved Spalletta repeatedly manipulated Uraniums reward-claim behavior, obtaining about $1.4 million of reward tokens from a liquidity pool. April 28: he exploited a separate liquidity-pool withdrawal-accounting flaw across multiple pools, obtaining about $53.3 million and leaving the platform unable to continue operating. Some publications round the aggregate to about $55 million; the court announcement provides the two-stage amounts and should control the timeline.How the first attack became a sham bounty The DOJ recounts a written admission by Spalletta about exploiting a smart-contract bug and taking roughly $1.5 million. After the first attack, he pressured Uranium into









