A 25-year-old former government contractor was arrested Wednesday on the Caribbean island of Saint Martin, accused of stealing more than $46 million in cryptocurrency from wallets managed on behalf of the U.S. Marshals Service - wallets that held assets seized in some of the federal government's highest-profile digital asset cases.
Key Takeaways
A 25-year-old contractor’s son allegedly stole $46M+ in crypto from U.S. government seizure wallets using insider access.
The theft was exposed not by federal investigators, but by a pseudonymous blockchain sleuth after the suspect bragged online.
He was arrested in Saint Martin in a joint FBI–French special forces operation; extradition to the U.S. is expected.
The case has sparked calls to audit all government-contracted crypto custody firms and overhaul federal digital asset protocols.
John Daghita faces allegations of siphoning funds from government custody accounts he had direct access to through his father’s firm. Dean Daghita is CEO of Command Services & Support, known as CMDSS — a Virginia-based company awarded a $4 million federal contract in October 2024 to manage and liquidate cryptocurrency seized by the USMS.
The government’s total crypto holdings exceed 198,000 Bitcoin, valued at over $14 billion. The wallets Daghita allegedly raided held assets tied to the 2016 Bitfinex hack and the Samourai Wallet prosecution. Investigators traced approximately 12,540 ETH — worth roughly $36.3 million at the time — to wallets linked to him.
A Telegram Argument Unraveled It All
What makes the case particularly embarrassing for federal agencies: it wasn’t law enforcement that cracked it. The theft came to light in January 2026 through the work of ZachXBT, a pseudonymous blockchain investigator, who connected Daghita — operating online under the alias “Lick” — to the stolen funds after Daghita screen-shared his crypto wallet during an argument on Telegram and openly flaunted his wealth. ZachXBT’s on-chain analysis did the job federal oversight apparently missed.
The arrest itself was a coordinated effort between the FBI and the GIGN, the elite tactical unit of the French Gendarmerie. Authorities seized a briefcase of cash, multiple USB drives, and hardware wallets at the scene. Extradition proceedings to the United States are expected to follow. Daghita is anticipated to face federal charges including theft of government property, wire fraud, and money laundering.
What Comes Next
The fallout has been swift in policy circles, if not in markets. Bitcoin and Ethereum prices were largely unmoved by the news. But within government contracting and crypto custody circles, the reaction has been sharper. Critics have zeroed in on what they describe as a nepotism problem — a contractor’s son given access to billions in federal digital assets through a family firm holding a multimillion-dollar government deal.
Calls for audits of all government-contracted crypto custody operations have grown louder following the arrest. Industry analysts suggest the Department of Justice may be pushed to rethink how it handles seized digital assets entirely, potentially shifting toward more decentralized models or tightly regulated institutional custodians with stricter access controls.
For now, Daghita remains in custody on Saint Martin. The larger question — how a 25-year-old with insider access managed to move tens of millions in government-held crypto before anyone in a federal agency noticed — doesn’t have a clean answer yet.
