Not legally the same. One is an attack on a concept, the decentralized protocol, the other is on an asset owned by an individual (or org). The CFAA prohibits unauthorized access to an individual’s or company’s computers or systems. Blockchain / protocol vulnerabilities can be exploited without the unauthorized access