A federal jury in Manhattan convicted a Maryland resident of computer fraud and money-laundering after he siphoned more than $50 million from the decentralized exchange Uranium Finance.
The hacks and financial impact
The first breach occurred on April 8, 2021, when the attacker manipulated Uranium’s smart contract to claim rewards far beyond his entitlement, extracting roughly $1.4 million. He later pressured the project into accepting a sham "bug bounty" of about $386 000 in exchange for returning the remaining funds. Two weeks later, on April 28, 2021, a second exploit targeted a flaw in the contract’s withdrawal calculations across multiple liquidity pools, allowing the thief to drain approximately $53.3 million. The loss forced Uranium Finance to cease operations due to insufficient capital.
Money laundering and the role of Tornado Cash
After the thefts, the perpetrator moved the cryptocurrency through a series of transactions, including the privacy-enhancing mixer Tornado Cash, to obscure the trail. Law-enforcement agencies later seized about $31 million in crypto linked to the hacks during a February 2025 raid.
How the stolen funds were spent
The laundered proceeds funded a series of high-value purchases. Among them were a Black Lotus Magic: The Gathering card valued at roughly $500 000 and 18 sealed Alpha Booster packs worth about $1.5 million. In the Pokémon market, the defendant bought a first-edition base set for close to $750 000 and a sealed box of first-edition booster packs for $257 500. Additional items included a Roman "Eid Mar" denarius commemorating Julius Caesar’s assassination (≈ $601 545) and a fragment of fabric from the Wright brothers’ original aircraft that Neil Armstrong carried to the Moon (≈ $137 500). Several of these items were recovered under a search warrant.
Legal outcome
The six-day trial, presided over by U.S. District Judge Jed S. Rakoff, resulted in convictions on all counts. The defendant now faces a maximum of ten years for computer fraud and up to twenty years for money-laundering, potentially totaling thirty years of imprisonment. U.S. Attorney Jamie McDonald emphasized that the crime caused real-world financial loss for victims and led to the collapse of an entire crypto platform. A statement from the Southern District of New York highlighted the coordinated effort of prosecutors and agency partners in securing the conviction.
Why it matters
The case underscores growing regulatory scrutiny of decentralized finance protocols and the tools used to conceal illicit proceeds. It demonstrates that mixers like Tornado Cash are not immune to law-enforcement action and that high-profile convictions can serve as a deterrent for future attacks. Moreover, the seizure of both digital assets and physical collectibles illustrates the breadth of investigative techniques now employed to track and recover the proceeds of cryptocurrency crimes.
