The FBI arrested John Daghita in Saint Martin for allegedly stealing over $46 million in cryptocurrency from the US Marshals Service, using internal access from his father’s government contracting firm. The stolen funds included assets from historic cases such as the 2016 Bitfinex hack.
On-Chain Sleuth Exposed Suspect via Telegram Brags
The case began in January when blockchain investigator ZachXBT flagged a user named “Lick” on X, who had posted wallet screenshots in a Telegram group to flaunt his wealth. Tracing the funds on-chain, ZachXBT linked them to US Marshals’ seized crypto holdings. The initial estimate of over $40 million later climbed to $46 million. ZachXBT identified the suspect as John Daghita, whose father Dean Daghita runs Command Services & Support (CMDSS), a contractor awarded a US Marshals contract in 2024 to handle crypto assets not supported by major exchanges (Class 2–4). John allegedly used his father’s company access to transfer funds from government wallets, then moved the stolen crypto and flaunted the proceeds.
FBI and French Gendarmerie Nab Suspect in Caribbean
After ZachXBT’s findings, the US Marshals Service and FBI launched a probe. On the night of March 4, 2026, the FBI, with support from the French Gendarmerie’s elite unit, arrested Daghita in Saint Martin. FBI Director Kash Patel confirmed the arrest on X on March 5. The French Gendarmerie’s international serious crime team and the Guadeloupe Intervention Group coordinated the operation. The case remains under investigation and is expected to serve as a cautionary example for government crypto asset security.