Find notable cyber news and cases, enriched with sources, timelines, and signals.

Jonathan Spalletta Cthulhon Jspalletta indicted in Jonathan Spalletta / Uranium Finance hack and laundering case

Law Enforcement
First reported
Last updated
Happening score
H score 36
2 unique sources, 2 articles

Summary

Hide ▲

U.S. prosecutors charged Jonathan Spalletta in a federal cybercrime case tied to the Uranium Finance hack, alleging more than $53 million in stolen crypto was laundered after repeated intrusions. The charge expands his criminal exposure for both the breach and the laundering scheme, while keeping recovery efforts focused on the stolen assets. It also highlights how smart-contract abuse can trigger massive losses and serious criminal liability.

Related Happenings

Kamerin Stokes sentenced for DraftKings account-selling scheme

Law Enforcement
First: 17.04.2026 10:10 Last: 17.04.2026 10:10 Sources 1

About this happening: **Kamerin Stokes** was **sentenced to 30 months in prison** for selling access to **tens of thousands of hacked DraftKings accounts**, closing a federal **cybercrime** case that a...

Uranium Finance smart contract flaws actively exploited security flaw

Vulnerability
First: 31.03.2026 18:30 Last: 31.03.2026 18:30 Sources 1

How related: Officials said the alleged attacks involved exploiting flaws in smart contract code.

About this happening: In **April 2021**, **Uranium Finance** smart contract flaws were **actively exploited** to drain funds from liquidity pools, including a **rewards calculation** weakness and a **t...

Uranium Finance hit by network compromise

Incident
First: 31.03.2026 12:15 Last: 31.03.2026 12:15 Sources 1

How related: Three weeks after the first breach, the second attack reportedly led to the withdrawal of nearly 90% of Uranium Finance's assets, prompting the exchange to shut down immediately.

About this happening: **Uranium Finance** suffered a **two-stage smart-contract hack** in **April 2021** that drained about **$53.3 million** and forced the exchange to shut down. The attacks exploited...

Hambardzum Minasyan extradited and charged in RedLine case

Law Enforcement
First: 26.03.2026 13:51 Last: 26.03.2026 13:51 Sources 1

About this happening: **Hambardzum Minasyan** was **extradited to the United States** and arrested in a **RedLine** infostealer case, bringing an alleged infrastructure operator into federal court. Pro...

Victoria Eduardovna Dubranova NoName057(16) charged and arraigned after extradition in Victoria Eduardovna Dubranova / NoName057(16) / CARR

Law Enforcement
First: 10.12.2025 14:26 Last: 10.12.2025 14:26 Sources 1

About this happening: **U.S. prosecutors** charged and **arraigned** **Victoria Eduardovna Dubranova** in a federal **cybercrime** case tied to **NoName057(16)** and **CyberArmyofRussia_Reborn (CARR)**...

Timeline

  1. 31.03.2026 12:15 1 articles · 1mo ago

    Jonathan Spalletta drains Uranium Finance on April 8, 2021

    Exploitation Observed

    Jonathan Spalletta exploits a flaw in Uranium Finance smart contract code on April 8, 2021, abusing the AmountWithBonus variable to issue zero-token withdrawal commands, drain about $1.4 million from the liquidity pool, and extort the exchange into assigning nearly $386,000 as a sham bug bounty.

    Show sources
  2. 31.03.2026 12:15 1 articles · 1mo ago

    Jonathan Spalletta's second Uranium Finance exploit shuts down the exchange on April 28, 2021

    Exploitation Observed

    Jonathan Spalletta returns on April 28, 2021 and exploits a separate single-character coding error in Uranium Finance transaction-verification logic, causing it to use 1,000 instead of 10,000, withdrawing nearly 90% of the assets across 26 liquidity pools while depositing effectively zero tokens, netting about $53.3 million and forcing Uranium Finance to shut down immediately.

    Show sources
  3. 31.03.2026 12:15 2 articles · 1mo ago

    U.S. prosecutors charge Jonathan Spalletta in the Uranium Finance case

    Legal Policy Action Update

    U.S. prosecutors charge Maryland man Jonathan Spalletta, known online as Cthulhon and Jspalletta, after his surrender to law enforcement and appearance in U.S. federal court; the charging action alleges two Uranium Finance smart-contract hacks, laundering through Tornado Cash, and exposure to up to 10 years for computer fraud and up to 20 years for money laundering.

    Show sources