Uranium Finance Hacker Convicted After $53M Theft Fueled Black Lotus and Pokémon Seizures
By Crypto Wire
October 8, 2026
A Manhattan jury convicted Jonathan Spalletta on October 7, 2026 of computer fraud and money laundering over two April 2021 hacks of decentralized exchange Uranium Finance, a case that landed on the phygital desk because prosecutors traced roughly $53.3 million in stolen crypto into sealed vaults of Magic: The Gathering and Pokémon cards. The U.S. Attorney’s Office for the Southern District of New York said Spalletta, also known online as Cthulhon, drained liquidity pools on BNB Chain, laundered proceeds through Tornado Cash and other routes, then bought high-end physical collectibles — including a Black Lotus card for about $500,000 and a complete first-edition Pokémon base set for about $750,000. Coverage on October 8 from Decrypt, BleepingComputer, and court reporters underscored how NFT-adjacent markets still intersect with old-school cardboard when stolen on-chain cash seeks a store of value.
The first exploit on April 8, 2021 allegedly pulled about $1.4 million by manipulating a rewards mechanism; the April 28 attack hit 26 pools and took most of Uranium’s holdings, forcing the platform to shut down. Spalletta surrendered in March 2026 and faced a six-day trial before U.S. District Judge Jed S. Rakoff. Sentencing is set for February 16, 2027, with statutory maximums of 10 years on the computer-fraud count and 20 years on money laundering. For collectors, the indictment reads like an inventory sheet: 18 sealed Alpha Booster Magic packs for about $1.512 million, a first-edition Pokémon booster box for about $257,500, Roman coins including an Eid Mar denarius for about $601,545, and even a Wright brothers fabric fragment said to have flown to the moon with Neil Armstrong.
Authorities said they seized cryptocurrency worth about $31 million at the time of a February 2025 search, alongside more than $3 million in graded cards and coins from Spalletta’s Maryland residence. That split matters for NFT collectors eyeing vaulted Pokémon programs: the government is treating premium cardboard like any other forfeitable asset, not a separate hobby exemption. Uranium’s victims were DeFi liquidity providers, but the spending pattern mirrors how wash-traded NFT profits sometimes rotate into physical trophies — only here the paper trail ended in a federal evidence locker instead of a marketplace leaderboard.
The case does not change how legitimate vaults or redemption windows operate, but it reinforces custody questions when a seller’s provenance cannot be verified. High-grade Magic and Pokémon markets already rely on grading houses and chain-of-custody paperwork; prosecutors leaned on those same objects as proof of lifestyle spending after an on-chain heist. Spalletta’s online handles and cybersecurity consulting background also highlight that technical credentials are not a substitute for exchange-level controls — a lesson DeFi teams still cite when discussing immutable contracts and emergency pauses.
NFT platforms sometimes market “phygital” bundles that ship cards or figures after a token sale. This conviction is the inverse: no mint, just allegedly stolen ether and BNB converted into items that must be stored, insured, and eventually forfeited. Collectors bidding on vaulted inventory should watch whether auction houses and vault partners tighten source-of-funds checks after high-profile seizures, especially when prices on legacy cardboard remain elevated despite broader crypto weakness on October 8.
Custody check: Watch the February 16, 2027 sentencing docket for restitution orders and any public catalog of forfeited collectibles heading to U.S. Marshals auctions. If graded Pokémon or Magic lots tied to the case surface with government provenance, that will set a benchmark for how federal agents liquidate seven-figure cardboard — and whether private vaults update KYC rules for six-figure inbound deposits.
Bottom line: Jonathan Spalletta faces years in prison after jurors tied him to $53 million in Uranium Finance losses and a shopping spree through sealed Magic and Pokémon inventory. Phygital collectors should read the docket as a custody warning — rare cards bought with hacked crypto can still end up in government vaults.
Disclaimer: This article is provided for informational and educational purposes only. It does not constitute financial, investment, legal, or trading advice. The NFT market is highly volatile, and past performance is not indicative of future results. Readers should conduct their own research and consult qualified professionals before making any decisions related to digital assets. The cover image for this article may have been created using artificial intelligence (AI).
