A New York jury found a Maryland cybersecurity consultant guilty of stealing about $55 million in cryptocurrency from a DeFi exchange, underscoring that “code is law” will not beat fraud in court.
Story Snapshot
- A Manhattan jury convicted Jonathan Spalletta on computer fraud and money laundering charges tied to two 2021 hacks.
- Prosecutors said he drained roughly $54.7 million from Uranium Finance and later laundered the funds.
- Defense claims about using “public” smart contract functions failed to sway jurors.
- The case shows prosecutors treating crypto exploits as standard theft and laundering, not gray-zone tech bugs.
Jury Verdict Confirms Fraud, Not a Technical Loophole
The United States Attorney’s Office for the Southern District of New York said a jury convicted Jonathan Spalletta on all counts after a six-day trial. Prosecutors told jurors he executed two attacks on Uranium Finance in April 2021 and laundered the proceeds through a series of transactions. The government described a deceptive set of moves that withdrew far more rewards than he was allowed to take. The verdict came in Manhattan federal court and caps a case that centered on intent and deception.
Prosecutors put the loss near $54.7 million, while news outlets rounded it to about $55 million. Uranium Finance shut down after the attacks, which added to the harm for users of the platform. The government framed the conduct as theft using computers and financial laundering, not a harmless quirk of code. The verdict reflects that framing. It treats a smart contract exploit like any other scheme that tricks a system to take value without consent.
Defense Arguments Focused on Attribution and “Public” Functions
Defense lawyers said the case lacked proof of “whose fingers were on the keyboard.” They argued that Spalletta used publicly available functions inside Uranium’s smart contracts and did not use stolen logins or inject malicious code. They also pushed back on linking funds spent later to the money taken in the hacks. The jury did not accept those points. Reporters said the panel reached a decision quickly after closing arguments, rejecting the code-based defense.
Courts often weigh intent, authorization, and deception in computer fraud cases. Here, the jury appears to have decided that using code in a way that tricks the system to release unearned value crosses the line. That is why the result matters. It says that public code functions are not a shield if used to deceive and to take funds that are not yours. The outcome also shows that attribution can be proven through digital trails even without a single keystroke witness.
Why This Case Matters for Everyday Investors and Savers
This verdict lands in a time when many Americans doubt the system is fair. People on the right and left worry that elites bend rules while regular folks pay the price. Crypto promised open finance. Instead, many saw confusing tools, sudden losses, and few answers. This case shows one part of government pressing real charges and winning a jury verdict when investors got hurt. That aligns with the basic rule that theft is theft, no matter the tool used.
𝗨𝗿𝗮𝗻𝗶𝘂𝗺 𝗙𝗶𝗻𝗮𝗻𝗰𝗲 𝗵𝗮𝗰𝗸𝗲𝗿 𝗰𝗼𝗻𝘃𝗶𝗰𝘁𝗲𝗱 𝗶𝗻 $𝟱𝟱𝗠 𝗗𝗲𝗙𝗶 𝘁𝗵𝗲𝗳𝘁
A Manhattan federal jury convicted Jonathan Spalletta on October 7 over the 2021 Uranium Finance exploits that prosecutors said stole nearly $55 million and helped force the DeFi…— Mandeep Singh (@mandeepsinghnz) October 7, 2026
For everyday users, the lesson is simple. If a platform fails, the fallout often hits regular people first. That is why clear rules and basic security matter. For builders, the message is also plain. If code behavior tricks a system and drains user funds, prosecutors will treat it like fraud and laundering, not clever arbitrage. That approach is becoming the norm in these cases, setting a path for future prosecutions and deterrence.
Sources:
washingtontimes.com, news.bloomberglaw.com
© standardheadlines.com 2026. All rights reserved.
