Hacker Trades $54M in Crypto for Pokémon Cards – Jail Time Not Included

by

Hot Mess Highlights

  • Jonathan Spalletta, aka “Cthulhon” (because why not?), allegedly swiped $54M from Uranium Finance in 2021. Because who needs a day job when you can just hack a crypto exchange?
  • He then proceeded to launder the cash through crypto mixers and blow it on Magic: The Gathering cards, Pokémon, and checks notes a piece of fabric from the Wright brothers’ airplane? Peak millennial crisis.
  • U.S. authorities finally caught up in 2025, seizing $31M in crypto. He’s now facing up to 30 years in jail. Spoiler: Pokémon cards don’t hold up well in prison.

So, this guy Jonathan Spalletta (or “Cthulhon,” if you’re nasty) decided that stealing $54 million from Uranium Finance was a better life choice than, say, getting a 9-to-5. Two hacks in April 2021 later, and Uranium Finance was left in the dust, probably wondering if they should’ve invested in better smart contracts instead of a fancy logo.

According to the U.S. Attorney’s Office, Spalletta exploited some seriously dumb errors in the platform’s code. His defense? “Crypto is all fake internet money anyway.” Fair point, but still, jail time is very real, Jonathan.

The Great Crypto Heist: A Step-by-Step Guide to Ruining Your Life

Step 1: Exploit Uranium Finance’s rewards system by repeating transactions like it’s a Black Friday sale. Pocket $1.4M. Nice.

Step 2: Pretend to be a white hat hacker, negotiate a “bug bounty,” and keep $386K. Generous of you, Jonathan.

Step 3: Find another vulnerability, drain $53.3M from 26 liquidity pools, and single-handedly shut down Uranium Finance. Overachiever much?

What He Bought: A Masterclass in Terrible Financial Decisions

With his ill-gotten gains, Spalletta went on a shopping spree that screams “midlife crisis meets Comic-Con.” Highlights include:

  • A $500K “Black Lotus” Magic card (because who doesn’t love overpriced cardboard?)
  • $1.5M in sealed Alpha booster packs (spoiler: they’re still sealed)
  • Over $1M in first-edition Pokémon cards (Pikachu’s probably judging)
  • A piece of fabric from the Wright brothers’ airplane that went to the moon (because why not?)
  • Roman coins worth $600K (ancient currency for a modern thief)

Authorities found all this at his place, which is now probably decorated like a very expensive, very illegal museum.

The Price of Being a Crypto Criminal: 30 Years, No Pokémon Allowed

Fast forward to 2025, and the feds finally caught up, seizing $31M in crypto. Spalletta’s now facing up to 10 years for computer fraud and 20 years for money laundering. Moral of the story? Crime doesn’t pay-unless you’re into collectible cards and ancient artifacts.

Homeland Security’s Kevin Murphy put it best: “We’ll keep chasing these tech-savvy thieves until they realize their ‘fake internet money’ leads to very real handcuffs.”

The Bigger Picture: Crypto’s Wild West

Uranium Finance’s downfall is just one in a long line of crypto catastrophes. Movie Token lost $242K last week, and North Korea’s still out here pretending to be remote IT workers. Meanwhile, the U.S. is playing whack-a-mole with hackers, but the moles keep multiplying.

So, if you’re thinking of becoming a crypto criminal, maybe just stick to buying Pokémon cards the old-fashioned way: with your allowance. Or, you know, a job.

Read More

2026-03-31 21:08