When federal agents raided a house in suburban Rockville, Maryland, they weren't just looking for cold-storage hard drives and recovery seed phrases. Along with encrypted laptops, investigators walked into what looked like an eccentric pop-culture museum.
Sitting in climate-controlled cases were pristine, first-edition Pokémon sets, a mint-condition "Black Lotus" card from Magic: The Gathering, an ancient Roman silver coin minted to celebrate the murder of Julius Caesar, and even a scrap of the original Wright Flyer carried to the moon by Neil Armstrong.
Now, the man who spent a fortune building that collection is bound for federal prison.
A jury in Lower Manhattan took just two hours to find 36-year-old Jonathan Spalletta guilty of computer fraud and money laundering. Prosecutors proved that Spalletta drained nearly $55 million in cryptocurrency from decentralized exchange Uranium Finance back in 2021, scrubbed the cash through automated mixers, and used the loot to buy some of the most expensive collectibles in the world.
Spalletta faces up to 20 years behind bars on the money-laundering charge alone when Senior U.S. District Judge Jed Rakoff sentences him in February 2027.
Anatomy of an Exploit
The story starts during the wild decentralized finance (DeFi) bubble of 2021, when money was pouring into untested automated market makers run entirely on open-source smart contracts.
In early April 2021, Spalletta discovered a flaw in Uranium Finance’s reward payout system, quickly pulling out an initial $1.4 million. In private messages revealed in court, he didn't even try to hide it:
"I did a crypto heist of $1.5MM a couple of weeks ago… There was a bug in a smart contract, and I exploited it… Crypto is all fake internet money anyway."
Three weeks later, on April 28, he returned for the real haul.
Spotting a catastrophic math error in Uranium's updated smart contracts—which governed balance checks during token withdrawals—Spalletta drained roughly $53.3 million across 26 different liquidity pools in a single afternoon. The sudden drain emptied the protocol's reserves, crashed its token to zero, and forced Uranium Finance to shut down for good.
From Tornado Cash to Mint Boosters
Pulling off a blockchain heist is one thing; actually spending tens of millions in blacklisted tokens is another puzzle entirely.
To clean the trail, Spalletta pushed millions through the crypto mixer Tornado Cash and tumbled it through a sprawling chain of intermediate burner wallets. Once the funds emerged on the other side, he converted portions into cash and began pouring money into rare physical assets that could hold value far away from traditional bank accounts.
According to receipts and auction records shown at trial, the spending spree was staggering:
$750,000 for a flawless first-edition Pokémon Base Set.
$500,000 for a legendary Magic: The Gathering Black Lotus.
$257,500 for an unopened vintage Pokémon booster box.
$600,000+ for an "Eid Mar" Roman silver denarius minted in 42 B.C. by Brutus to mark Caesar's assassination.
$137,000 for an authenticated swatch of the 1903 Wright Brothers plane flown to the lunar surface on Apollo 11.
By the time feds closed in, they seized over $3 million in rare trading cards and historical relics, along with roughly $31 million in unspent cryptocurrency.
The "Code Is Law" Defense Falls Flat
Spalletta’s defense team tried to rely on a classic argument in crypto circles: "code is law."
His lawyers argued that their client hadn't broken through firewalls or stolen passwords; he simply called public functions that were written directly into Uranium's open-source code. They also claimed the government was connecting unrelated dots, insisting his luxury card collecting didn't pick up speed until years after the protocol went bust.
The jury wasn't buying it. Taking just two hours to return a guilty verdict on both counts, the jurors sent a clear message: finding a math bug in a public computer program doesn't give you the legal right to empty the safe.
The Reality Check
For federal investigators, the conviction is another big feather in the cap. It shows that the FBI and Homeland Security Investigations have closed the gap on on-chain laundering. Blockchain tracing has gotten sharp enough that mixing services and burner wallets no longer guarantee safety once the money touches real-world auction houses and escrow accounts.
The Justice Department is now working to liquidate the seized cards, coins, and crypto to return whatever it can to victims who lost savings in Uranium's collapse.
As for Spalletta, his own words came back to haunt him. Calling cryptocurrency "fake internet money" might have sounded clever in a private chat five years ago, but the federal prison sentence waiting for him is very real.
