A New York jury convicted a cybersecurity consultant of stealing nearly $55 million in crypto and laundering it into rare trading cards, closing a case that shows how digital thieves try to hide in plain sight.
Story Highlights
- A Manhattan jury found Jonathan Spalletta guilty of computer fraud and money laundering after a short deliberation.
- Prosecutors tied him to two 2021 attacks on Uranium Finance that drained about $53–$55 million.
- Authorities seized millions in crypto and rare Pokémon and Magic: The Gathering cards from a Maryland home.
- Defense claims that he used public smart-contract functions were rejected by the jury.
Jury Verdict Confirms Massive Crypto Theft and Laundering
Prosecutors said Jonathan Spalletta ran two attacks in 2021 on Uranium Finance, a decentralized crypto platform, and siphoned roughly $53 to $55 million. A New York jury convicted him of computer fraud and money laundering after just over two hours of deliberation, signaling the panel found the evidence clear and convincing. Post-verdict summaries describe a scheme that drained liquidity pools, routed funds through a mixing service, and funded luxury purchases, including rare trading cards.
The United States Attorney’s Office for the Southern District of New York stated that Spalletta exploited vulnerabilities across multiple pools, forcing the exchange to shut down due to the loss of funds. Reporting said agents later seized about $31 million in cryptocurrency and more than $3 million in collectible cards from a Maryland residence, recovering part of the loot while documenting the conversion of stolen assets into tangible goods. These seizures anchored the money trail that jurors reviewed at trial.
How Prosecutors Said the Scheme Worked
Government filings and trial coverage describe a familiar pattern in crypto crime: code-level exploitation, chain-hopping, use of a mixer, then eye-catching spending. Reports say funds flowed through Tornado Cash, a service prosecutors have linked to large-scale laundering in other cases, before purchases like a famed Black Lotus card and sealed Alpha Booster packs were made. The detailed purchase list, unusual in many crypto cases, gave jurors a concrete picture of where the stolen money went.
According to post-verdict accounts, the government’s narrative showed a chain from the 2021 exploit to wallets under Spalletta’s control, then to collectibles dealers and auction houses. That clean arc helps non-technical jurors see intent and concealment. Prosecutors often rely on this kind of “exploit to mixer to goods” story to translate complex blockchain steps into common-sense facts about theft and spending. Here, that structure appears to have carried the day with the jury.
Defense Framed Actions as Lawful Use of Public Code
Defense lawyer Shrey Sharma argued that Spalletta did not “hack” Uranium Finance, but instead used public functions already in the smart contracts. He said there were no spoofed logins or malicious code that beat an access control system. He also warned jurors that blockchain tracing alone does not prove who was at the keyboard, and he challenged the tie between Uranium Finance funds and later collectible purchases. That attribution-first defense was reported from the courtroom as the core theory.
A cybersecurity consultant, a guy literally paid to find and fix vulnerabilities, just got convicted of draining $50M+ from a crypto exchange he was never hired to protect, then blowing part of it on rare trading cards. The scary skill set and the protective skill set are the…
— Nacho AF CMO (@IgnacioAFCMO) October 9, 2026
The jury’s verdict rejected those claims. Jurors heard about the drain of funds and the follow-the-money path into tangible assets. Post-verdict reporting says they concluded it was theft and laundering, not a clever but lawful use of open code. As always, a verdict is not a technical treatise on smart contracts; it is a fact finding. The panel weighed the evidence, including tracing and seizures, and found guilt beyond a reasonable doubt under federal law.
Why This Case Matters for Consumers and the Rule of Law
Crypto crime hits real people. When a platform’s pools are emptied, everyday investors and retirees lose savings, and trust in markets falls. This case shows that federal prosecutors, under President Trump’s administration, are pressing hard against complex digital theft and the laundering tools that hide it. The outcome warns would-be thieves that mixers and collectibles are not safe harbors. Agents can trace funds, seize assets, and bring a clean case to a jury.
Conservatives want equal justice, strong property rights, and honest markets. This verdict affirms those values. It says you cannot raid a code flaw, wash the money, and stash wealth in trading cards without facing consequences. It also underscores a need for platforms to fix weak code fast and for Congress to back clear penalties for money laundering in the digital space. Order, accountability, and the rule of law must hold online the same as on Main Street.
What Is Still Not Public
Public reports do not include the full trial record. The news stories summarize counts, dollar amounts, and some purchase details, but they do not publish transaction hashes, wallet maps, or the expert testimony that linked the exploit to the defendant. That material often appears later in sentencing filings or exhibits. Still, the jury saw enough to convict on both the computer fraud and money laundering charges in federal court.
For victims, the key question now is recovery. Seized crypto and high-value cards can support restitution. The Department of Justice described substantial recoveries already. Sentencing and forfeiture proceedings will set the final numbers and outline how much can be returned. The signal is clear: digital theft will be traced, and the goods bought with it will be clawed back for the people who were harmed.
Sources:
news.bloomberglaw.com, bloomberg.com, gizmodo.com, news.bitcoin.com, ground.news, crypto.news
