From Cyberscoop:

Assange’s acknowledgement that he tried to crack the password, thus participating in illegal activity, is enough to charge him with a CFAA violation for which he could face five years in prison, according to Paul Rosenzweig, a senior fellow at R Street consulting and a law professor at Georgetown University.