Crime & Safety

'Fake Internet Money Anyway': MD Man Faces Federal Charges For Crypto Hack

Jonathan Spalletta, a 36-year-old man from Rockville, was charged in a federal indictment in relation to a cryptocurrency hack.

Trading cards and Roman coins that were bought after over $50 million in funds were stolen in a cryptocurrency hack.
Trading cards and Roman coins that were bought after over $50 million in funds were stolen in a cryptocurrency hack. (U.S. Attorney's Office, Southern District of New York)

MONTGOMERY COUNTY, MD — Jonathan Spalletta, a 36-year-old Rockville man, was named in a federal indictment tied to a cryptocurrency hack that led to the theft of tens of millions of dollars.

A release issued by the Southern District of New York states Spalletta was charged Monday with computer fraud and money laundering offenses.

Spalletta, who also used the names "Cthulhon" and "Jspalletta" online, is tied to two hacks committed against the Uranium Finance cryptocurrency exchange.

Find out what's happening in Rockvillefor free with the latest updates from Patch.

According to the indictment, the thefts date back to 2021, when on April 8 and 21, Spalletta exploited vulnerabilities in the crypto's smart contracts.

The first incident led to the theft of funds worth $1.4 million, whereas the second hack amounted to $53.3 million.

Find out what's happening in Rockvillefor free with the latest updates from Patch.

Federal prosecutors said Spalletta later used the funds to buy a variety of items, such as collectible Magic: The Gathering and Pokémon trading cards and antique Roman coins.

Funds were also laundered through a "complex series of cryptocurrency transactions" that included the use of the Tornado Cash mixer, officials said.

Two weeks after the second heist, authorities said Spalletta messaged another person, writing:

“I did a crypto heist of $1.5MM a couple of weeks ago . . . There was a bug in a smart contract, and I exploited it . . . Crypto is all fake internet money anyway.”

A search warrant later executed in February 2025 also returned the seizure of cryptocurrency worth $31 million.

"Stealing from a crypto exchange is stealing—the claim that ‘crypto is different’ does not change that," U.S. Attorney Jay Clayton said in a release.

"For the victims, there is nothing different about having your money taken. Spalletta cost real victims real losses of tens of millions of dollars, and now he’s under real arrest.”

Spalletta is facing up to 20 years in prison on the money laundering charge and 10 years for computer fraud.

Anyone who believes they were affected by the Uranium hack is urged to contact the Homeland Security Investigations bureau.

Get more local news delivered straight to your inbox. Sign up for free Patch newsletters and alerts.