Contractor’s Son Arrested in $46M U.S. Marshals Crypto Theft Case

FBI and French Tactical Unit Capture Suspect in Saint Martin

A dramatic international operation has led to the arrest of a man accused of stealing more than $46 million in cryptocurrency from wallets controlled by the U.S. government.

Authorities detained John Daghita on the Caribbean island of Saint Martin, following a coordinated effort between the Federal Bureau of Investigation and France’s elite Gendarmerie Nationale.

The arrest was confirmed by Kash Patel, who described the operation as the result of around-the-clock international law enforcement coordination.

At the center of the case is an alleged breach involving digital assets overseen by the United States Marshals Service, the agency responsible for managing and disposing of certain seized cryptocurrencies.

A Telegram Argument That Triggered a Federal Investigation

Blockchain Sleuth Spots Suspicious Wallet Activity

The investigation began in an unlikely place: a public argument on Telegram.

In January 2026, blockchain investigator ZachXBT publicly identified Daghita—known online as “Lick”—after the suspect allegedly exposed control of a large cryptocurrency wallet during a “band-for-band” online bragging exchange.

ZachXBT traced at least $24.9 million to a wallet believed to be controlled by the U.S. government. His investigation also linked the activity to more than $90 million in suspected illicit crypto flows.

After the revelations, Daghita reportedly taunted the investigator on Telegram and executed a “dusting attack”—sending small amounts of cryptocurrency to ZachXBT’s wallet address using funds believed to be part of the stolen assets.

According to the investigator, the wallet addresses connected to Daghita had already been reported to authorities before the stunt occurred.

The Contractor Connection Behind the Alleged Theft

Family Ties to a U.S. Government Crypto Contract

Daghita is the son of Dean Daghita, president of Command Services & Support, commonly known as CMDSS.

The Virginia-based firm secured a $4 million contract with the U.S. Marshals Service in October 2024.

The agreement involved managing and disposing of certain categories of seized cryptocurrency, including “Class 2–4” digital assets requiring specialized custody solutions.

Investigators say some of the allegedly stolen funds were traced to wallets containing cryptocurrency seized from the 2016 hack of the exchange Bitfinex.

Oversight Concerns Surround U.S. Government Crypto Holdings

Questions Grow Over Digital Asset Custody

The case has intensified scrutiny of how U.S. authorities manage seized digital assets.

A 2025 report by CoinDesk previously revealed that the U.S. Marshals Service had difficulty reconciling parts of its own cryptocurrency holdings.

Those concerns have grown more serious as the agency now serves as the primary custodian for the U.S. Bitcoin Reserve, a growing government-controlled pool of seized bitcoin.

The contractor agreement with CMDSS had also faced scrutiny earlier.

Competitor Wave Digital Assets formally protested the contract award, arguing that CMDSS lacked certain technical credentials and pointing to potential conflicts of interest. The Government Accountability Office ultimately denied the protest.

What Happens Next

Extradition Proceedings Expected

Formal criminal charges against John Daghita have not yet been publicly disclosed.

Authorities expect the case to move toward extradition proceedings, which could transfer the suspect to the United States to face federal prosecution.

For investigators, the case serves as a reminder of how blockchain transparency and online behavior can unexpectedly expose large-scale financial crimes—sometimes beginning with nothing more than a social media dispute.