U.S. Government Investigates Alleged $40 Million Cryptocurrency Theft by Federal Contractor’s Son
January 27, 2026 — The U.S. government is currently probing allegations that over $40 million in cryptocurrency, seized during law enforcement actions, was stolen through insider access by the son of a federal contractor, raising concerns about the security of government-controlled digital assets.
Officials have confirmed that the U.S. Marshals Service (USMS) is investigating claims involving the unauthorized siphoning of confiscated digital assets from wallets linked to government seizures. The investigation centers on Command Services & Support (CMDSS), a Virginia-based technology firm contracted by the USMS to assist in managing and disposing of certain categories of seized cryptocurrency.
Details of the Alleged Theft
Blockchain investigator ZachXBT publicly alleged that John “Lick” Daghita, son of CMDSS’s president and CEO Dean Daghita, exploited insider access to crypto wallets containing government-seized digital assets. According to ZachXBT, John Daghita demonstrated his control over wallets holding millions in cryptocurrency via a screen-sharing session during a private online chat, evidence that was later circulated publicly.
Using on-chain analysis, ZachXBT connected multiple wallet addresses controlled by “Lick” to assets directly associated with the USMS. These wallets reportedly contained cryptocurrencies seized through high-profile operations, including funds linked to the notorious 2016 Bitfinex hack, one of the largest crypto thefts in history.
In a series of posts on the social media platform X, ZachXBT detailed that one such wallet held approximately 12,540 ether (ETH) — valued near $36 million at current market prices. He claims to have received a small transfer of 0.6767 ETH from Daghita, which he intends to forward to a U.S. government seizure address. The investigator also noted a suspicious movement of roughly $20 million from USMS-linked wallets in October 2024, most of which was recovered, although about $700,000 transacted through instant exchanges remains unaccounted for.
Moreover, ZachXBT estimates that total suspected asset thefts could exceed $90 million when considering additional wallet activities observed in late 2025, with some cryptocurrencies still held in compromised wallets.
Role of CMDSS and Contract Details
CMDSS was awarded a federal contract in October 2024 to support the USMS’s efforts in handling and liquidating seized and forfeited digital currencies, including those not supported by mainstream crypto exchanges and assets entangled in complex criminal investigations. The nature of how John Daghita allegedly obtained access remains unclear, including whether it involved unauthorized use of CMDSS’s internal systems or assistance from his father’s position within the company.
Government Response and Ongoing Investigation
A spokesperson for the USMS, Brady McCarron, told Bitcoin Magazine that the agency could not provide further comments due to the active nature of the investigations. The allegations cast a spotlight on vulnerabilities in the security protocols governing the government’s rapidly expanding portfolio of confiscated digital assets.
National Implications for Bitcoin and Digital Asset Security
The U.S. government reportedly controls a substantial amount of bitcoin and other cryptocurrencies estimated between approximately 198,000 and over 300,000 BTC, valued in the tens of billions of dollars. According to bitcointreasuries.net, the government holds upwards of 328,000 bitcoins, worth an estimated $29 billion at current prices.
This latest controversy follows heightened public scrutiny of the handling of government-seized bitcoin. Earlier in 2026, reports questioned whether forfeited assets tied to the Samourai Wallet case were sold despite executive orders mandating retention of seized bitcoin as part of a U.S. Strategic Bitcoin Reserve. Although federal officials denied selling those assets, the absence of transparent on-chain evidence has continued to fuel skepticism within the crypto community.
Conclusion
The ongoing investigation into the alleged theft calls attention to the critical need for enhanced security and oversight frameworks to safeguard publicly controlled cryptocurrency holdings. As the government increasingly relies on private contractors to manage digital assets, this incident underscores potential risks when insider access is not rigorously monitored.
Bitcoin Magazine will continue to follow developments on this story as more information becomes available.
Reported by Micah Zimmerman for Bitcoin Magazine.