The FBI has arrested John Daghita, a man who allegedly stole $46 million in cryptocurrency from the US Marshals Service by abusing access at his father’s company — the firm contracted to securely store seized crypto on behalf of the federal government.
FBI Director Kash Patel announced the arrest Thursday. Daghita was captured on the island of Saint Martin by French gendarmerie in a joint operation with the FBI.
How It Happened
Daghita’s father ran CMDSS, a company that held a US Marshals Service contract to securely store seized cryptocurrency. John Daghita allegedly exploited his proximity to that system to steal more than $46 million in crypto assets.
The theft was first exposed not by the FBI, but by ZachXBT — a pseudonymous blockchain detective and Paradigm advisor. In January 2026, ZachXBT published an investigation connecting Daghita to the theft after a Telegram account linked to Daghita revealed control over blockchain addresses connected to the stolen funds.
The revelation came in the most absurd way possible: Daghita was allegedly bragging in a Telegram group chat about how much crypto he controlled, sparring with another user over who had more. ZachXBT noticed the addresses and connected the dots.
“John then taunted me multiple times via his Telegram channel and dust attacked my public wallet address with stolen funds,” ZachXBT wrote after the arrest. “Thanks for the last laugh, John.”
Most Funds Reportedly Returned
According to earlier reports, the vast majority of the stolen funds were returned within 24 hours of the theft — suggesting either cooperation or rapid blockchain forensics. The US Marshals Service declined to comment at the time, citing an ongoing investigation.
Why This Matters for the Strategic Bitcoin Reserve
The United States is the largest known nation-state holder of Bitcoin, primarily through law enforcement seizures accumulated over years. The establishment of the Strategic Bitcoin Reserve under executive order was supposed to formalize this into a sovereign asset.
But if a contractor’s son can steal $46 million from the same system, the security question becomes urgent. The government’s crypto custody infrastructure was built for evidence storage, not sovereign wealth management. The gap between those two requirements is enormous.
Key questions remain unanswered:
- How did a single individual access enough systems to move $46 million?
- What oversight exists for third-party custody contractors?
- Has the custody infrastructure been upgraded since the theft?
- Are Strategic Bitcoin Reserve holdings stored through the same systems?
The ZachXBT Factor
This case highlights an uncomfortable reality: a pseudonymous blockchain analyst with no government authority identified the thief before the FBI did. ZachXBT’s investigation, published on social media, created the pressure that ultimately led to the arrest.
It’s both a testament to blockchain transparency — every transaction is public and traceable — and an indictment of government security. If the blockchain is transparent enough for a Twitter detective to solve the case, why couldn’t the people running the custody system catch it first?
FBI Director Patel framed the arrest as a victory: “FBI will continue working 24/7 with our international partners to track down, apprehend, and bring to justice those who attempt to defraud American taxpayers.”
True. But the taxpayers might prefer the fraud not happen in the first place.
Sources: Gizmodo, Securities.io, FBI Director Kash Patel (X)