FBI Arrests Suspect in $46M Theft From U.S. Marshals Service Crypto Wallet
John Daghita, suspected of stealing $46 million in digital assets from a U.S. government cryptocurrency wallet, was arrested in Saint Martin. Blockchain sleuth ZachXBT played a key role in identifying him.
Arrest in Saint Martin
The FBI has apprehended John Daghita, the man accused of stealing over $46 million in cryptocurrency from a wallet belonging to the U.S. Marshals Service (USMS). The arrest took place on the Caribbean island of Saint Martin in a joint operation with an elite tactical unit of the French Gendarmerie.
FBI Director Kash Patel confirmed the arrest in a social media post:
"Last night, John Daghita – a U.S. government contractor who allegedly stole more than $46 million in cryptocurrency from the U.S Marshals Service – was arrested on the island of Saint Martin by the French Gendarmerie's premier elite tactical unit in a joint operation with the…" — FBI Director Kash Patel (@FBIDirectorKash), original post
Patel referred to Daghita as a "government contractor," though his specific role remains unclear.
Why This Matters
This incident represents one of the largest known thefts of government-seized cryptocurrency. The stolen assets were tied to U.S. government seizures related to the Bitfinex case — one of the most high-profile criminal proceedings in the crypto industry. The breach raises serious questions about the security protocols surrounding confiscated digital assets and the vetting of contractors granted access to them.
ZachXBT's Investigation Paved the Way
On-chain investigator ZachXBT publicly identified Daghita in late January 2026, roughly a month before the arrest. The blockchain detective traced the suspect after Daghita, operating under the alias "Lick," made a critical mistake — boasting in a Telegram chat and inadvertently revealing his wallet address. This allowed ZachXBT to track the movement of the stolen funds across the blockchain.
The investigation also uncovered that Daghita's father, Dean Daghita, serves as CEO of CMDSS — a company that signed a contract with the U.S. Marshals Service in 2024 to assist in managing certain seized cryptocurrencies. According to ZachXBT, the younger Daghita exploited access gained through his father's firm to carry out the theft.
Following the arrest, ZachXBT published a separate statement:
"John Daghita (Lick) was arrested in the Caribbean yesterday as a direct result of my investigation. In late January 2026, I exposed how John stole $46M+ in seized crypto assets from the US government by abusing access at CMDSS, his father's company, which held a USMS contract.…" — ZachXBT (@zachxbt), original post
Suspect Taunted the Investigator
ZachXBT revealed that after publishing his findings, Daghita repeatedly taunted him through a Telegram channel and even sent stolen funds to the detective's public wallet address as a form of provocation. Following the arrest, ZachXBT sarcastically thanked the suspect for "the last laugh."
The case underscores the growing impact of independent on-chain analysis in combating crypto crime. Blockchain investigators are increasingly driving real-world law enforcement outcomes, turning transparent ledger data into actionable intelligence that leads to arrests and prosecutions.
Frequently Asked Questions
Who was arrested for stealing $46 million from U.S. Marshals crypto wallet?
The FBI arrested John Daghita, who allegedly stole over $46 million in digital assets from a U.S. Marshals Service cryptocurrency wallet. He was apprehended on the island of Saint Martin in a joint operation with French law enforcement.
How did ZachXBT identify the suspect in the $46M government crypto theft?
The suspect, operating under the alias 'Lick,' revealed his wallet address while boasting in a Telegram chat. ZachXBT used this information to trace the movement of stolen funds on the blockchain and published his findings in late January 2026.
What is CMDSS and its connection to the U.S. Marshals crypto theft?
CMDSS is a company led by Dean Daghita, the suspect's father. The firm signed a contract with the U.S. Marshals Service in 2024 to help manage seized cryptocurrencies. John Daghita allegedly exploited access through his father's company to commit the theft.
Where were the stolen $46M in crypto assets originally from?
The stolen assets were linked to U.S. government seizures in the Bitfinex case, one of the most high-profile criminal proceedings in the cryptocurrency industry.
How long did it take to arrest the suspect after ZachXBT's investigation?
ZachXBT publicly identified John Daghita in late January 2026, and the arrest occurred on March 5, 2026 — roughly one month after the investigation was published.
Read also
US DOJ Seizes Over $580M in Crypto Linked to Chinese Criminal Organizations
The U.S. Department of Justice seized more than $580 million in cryptocurrency tied to Chinese criminal organizations, marking one of the largest crypto enforcement actions in history.
GPU Memory Attacks, $21B in Cybercrime Losses, and Chrome's Chip-Level Protection: Cybersecurity Roundup
The FBI reported record $21 billion in cybercrime losses for 2025, Google introduced hardware-bound session protection in Chrome, and researchers demonstrated three new attack methods targeting Nvidia GPU memory.
Tether Has Frozen $4.2 Billion in Illicit Funds Through Law Enforcement Cooperation
The issuer of the world's largest stablecoin USDT revealed it has cumulatively blocked $4.2 billion in assets tied to criminal activity, working alongside agencies from over 60 countries.
Bitcoin Surges Past $71,000 While Spot ETF Holders Face Record Drawdown
BTC climbed above $71,800 on March 4 backed by $1.4 billion in spot ETF inflows over five days. Yet the average cost basis for ETF investors sits around $79,000, leaving them deep in the red.
Bitcoin Dips to $65,112 as Analysts Warn of Deeper Correction to $46K–$54K
Bitcoin fell to $65,112 on March 30, hitting its lowest level since late February. On-chain analysts Willy Woo and Joao Wedson suggest a potential bottom in the $46,000–$54,000 range.
Insiders Netted Over $1M from ZachXBT Investigation Bets on Polymarket
On-chain researcher defioasis.eth found that 8 out of 10 top-earning wallets on a ZachXBT-related Polymarket market show signs of insider trading. Meanwhile, Kalshi is conducting roughly 200 insider trading investigations.