Indictment Against BNB Chain Hacker Spalletta

BNB Chain Vulnerability in Uranium Finance Hack

The U.S. Attorney’s Office for the Southern District of New York has indicted Maryland resident Jonathan Spalletta, who hacked the now-defunct decentralized finance platform Uranium Finance twice in 2021, stealing more than $54 million in cryptocurrency. Spalletta surrendered to authorities on Monday. Prosecutor Jay Clayton stated that Spalletta stole millions of dollars by exploiting smart contracts to crash the platform.

Source: US Attorney’s Office for the Southern District of New York

Uranium Finance, a Uniswap fork based on BNB Chain associated with BNB detailed analysis, went live in April 2021. In the first hack on April 8, $1.4 million was stolen, most of which was returned through a deal with the hacker. In the second hack on April 28, $53.3 million worth of Bitcoin (BTC), Ether (ETH), and U92 tokens were stolen from 26 liquidity pools using a smart contract vulnerability, and the platform shut down. Collectibles such as Pokémon cards, antique Roman coins, and a piece of fabric from the Wright brothers’ airplane were purchased with the stolen funds; these items were seized from Spalletta’s home. In February, $31 million in cryptocurrency was confiscated. Spalletta faces charges of wire fraud (up to 10 years) and money laundering (up to 20 years).

Source: Uranium Finance

BNB Chain Security and Current Status

This incident recalls early DeFi vulnerabilities in the BNB Chain ecosystem. Today, BNB Chain has been strengthened with audit mechanisms, but past hacks affect investor confidence.