Over $40 million cryptocurrencies stolen: The massive theft from US government wallets

A major criminal case has begun after a blockchain investigator found evidence that the child of a second government contractor allegedly stole over $40 million worth of seized digital assets. This discovery has opened the door to significant questions about how the federal government manages the cryptocurrency it controls, and how such a large theft could have gone unnoticed.

The US Marshals Service (USMS) is now actively examining the allegations against John “Lick” Daghita, the son of Dean Daghita, director of CMDSS. CMDSS is a government-contracted company responsible for managing and analyzing cryptographic assets seized by law enforcement.

Blockchain Researcher Exposes Theft Through Digital Footprints

The investigator known as ZachXBT reported the allegations. According to his analysis, he uncovered how the funds were stolen and where they ended up. The investigation includes wallet addresses directly linked to approximately $90 million worth of cryptocurrency seized by the government in 2024 and 2025.

Key details: at least $23 million of the funds are in wallets controlled by Daghita. The investigator also found a wallet containing 12,540 Ethereum, worth roughly $36.3 million. According to ZachXBT, this wallet is directly controlled by Daghita.

Video Evidence Shows Control Over Seized Funds

A critical piece of evidence came from private recordings made available to the investigator. In a video conversation on Telegram, Daghita is seen demonstrating access to various cryptocurrency wallets holding large sums.

In the first part of the recording, Daghita shows an Exodus Wallet with $2.3 million in cryptocurrency. In the next segment, another $6.7 million worth of Ethereum is transferred to a different wallet address. Each transaction reveals a clear pattern indicating control and access to the seized digital assets.

The source of this access remains an open question. It is not yet clear whether it was obtained directly from his father or through other means. Brady McCarron, the public affairs chief of USMS, stated that the agency cannot provide detailed comments as the investigation is ongoing.

How Such a Large Theft Was Possible

The implications of this case go beyond a single suspect. It highlights potential security gaps in the federal system for handling confiscated digital assets. CMDSS, through its government contract for IT services, has direct access to cryptocurrency wallets held by the government.

The common question is: how could someone alter the direction of $40 million in seized funds? The answer serves as a warning to organizations responsible for managing digital assets.

Previous reports indicate that USMS itself was not fully aware of how much cryptocurrency was actually under its control. A White House initiative in February 2025 identified the possibility of a national cryptocurrency reserve, but this revelation raised new questions about inventory and security protocols of current holdings.

Implications for Cryptocurrency Management

ZachXBT’s statement on the case is direct: “The actors involved continue to show off and announce the recovered funds rather than remain silent.” Such recklessness seems to have facilitated law enforcement’s efforts to build a strong case against these suspects.

The Department of Defense, the Department of Justice, and CMDSS itself have not yet issued official statements regarding the investigation details. Their confusion reflects the larger challenge faced by the federal government in securing and managing cryptocurrency assets in the digital age.

As the USMS investigation continues, the implications are clear: managing confiscated digital assets requires tighter oversight, higher security standards, and more effective internal controls to prevent such thefts in the future.