FBI Arrests Contractor Over $46M Government Crypto Theft

In a joint international operation, federal authorities have apprehended a United States government contractor accused of siphoning millions in digital assets from the U.S. Marshals Service. The high-profile arrest highlights glaring vulnerabilities in how federal agencies secure seized digital funds and underscores the growing risks of insider threats within the government's own custody chain.

Caribbean Arrest According to public statements from FBI Director Kash Patel, law enforcement detained John Daghita on the Caribbean island of Saint Martin following a multi-agency manhunt. Authorities allege Daghita exploited his insider access to steal roughly $46 million in cryptocurrency from federal seizure wallets. Patel noted that the tactical operation was conducted alongside French authorities, specifically utilizing elite units from the Gendarmerie Nationale.

The suspect is the son of Dean Daghita, the chief executive at Command Services & Support. This Virginia-based technology firm secured a federal contract in October 2024 to assist the U.S. Marshals Service in managing and disposing of seized digital assets. The stolen government funds reportedly included cryptocurrency tied to the massive 2016 Bitfinex exchange exploit.

Independent on-chain investigator ZachXBT played a pivotal role in unraveling the federal theft. In early 2026, ZachXBT publicly traced more than $23 million of the missing federal funds, linking complex wallet movements directly to addresses controlled by Daghita. The blockchain analyst discovered that the suspect had inadvertently exposed his identity and real-time transaction capabilities during a private online dispute.

Following his public identification, law enforcement tracked the suspect to a luxury villa. According to reporting by Forbes, French officers recovered $239,348 in physical cash during the raid, alongside multiple hardware wallets containing the missing digital assets, a luxury watch, and computer flash drives. Forbes also detailed that the suspect had allegedly used the misappropriated federal funds to purchase a Lamborghini Aventador, charter a private yacht, and spend over two million dollars acquiring rare social media usernames.

Custody Chain Vulnerabilities The incident has raised serious questions regarding the operational protocols used by federal agencies to secure digital assets. Rather than a sophisticated external breach, the multimillion-dollar theft was allegedly carried out using authorized access keys that the contractor already possessed.

Les Borsai, co-founder of the investment advisory firm Wave Digital Assets, has openly criticized the government's handling of seized digital funds. Borsai pointed out that the current transfer process typically requires two or three manual handoffs between investigative agencies and interim wallets before the cryptocurrency finally reaches a designated secure custodian. This fragmented custody chain, he cautioned, creates multiple systemic points of failure that insiders can easily exploit. Notably, Wave Digital Assets had previously submitted an unsuccessful bid for the same government custody contract that was ultimately awarded to Daghita's employer.

As the Department of Justice continues to seize billions in digital assets from cybercriminals and illicit platforms, the Marshals Service faces mounting pressure to implement institutional-grade security measures. The case demonstrates that relying on third-party contractors without stringent cryptographic controls leaves taxpayer assets vulnerable to the very same theft the agencies are tasked with preventing.