Jonathan Spalletta, aged 36, was found guilty of hacking the Uranium Finance decentralized exchange twice in April 2021, stealing over $53 million in cryptocurrency. He exploited smart contract flaws to drain liquidity pools and extorted the platform for a 'bug bounty' before laundering the stolen funds through mixers and exchanges. Authorities recovered luxury collectibles purchased with the stolen assets from his residence in 2025.
bleepingcomputer.com
· 2026-10-08
On September 11, an attacker exploited two flaws in Symbiosis Finance's smart contracts: a hidden privilege-escalation bug granting fake admin rights, and a missing check that allowed negative transaction fees. Using just 330 satoshi, roughly 25 cents, the attacker set fees to negative values across 12 transactions, minting 46 billion wrapped syBTC tokens on a network meant to represent real Bitcoin. They then sold the fabricated tokens against legitimate wrapped-BTC pairs like WBTC and cbBTC, draining liquidity pools and converting about $336,000 into cash via Uniswap before being blocked.
tomshardware.com
· 2026-09-18
GoKawiil