FBI arrests suspect in $46M BTC theft

TLDR

The FBI has arrested a US government contractors son in Saint Martin over an alleged theft of more than 46 million dollars in seized cryptocurrency from US Marshals wallets.

1. John Lick Daghita is accused of stealing over 46 million dollars in crypto, including Bitcoin, from US Marshals Service seizure wallets managed by his fathers company.
2. Investigators say he abused insider access at a federal contractor, with on chain analysis and a public investigation by ZachXBT helping link his wallets to the missing funds.
3. The case highlights insider risk in large custodians, including government crypto reserves, and will likely push tighter controls on how seized and custodied digital assets are managed.

Deep Dive

1. Arrest And Alleged Theft

According to multiple reports, French and US authorities arrested John Lick Daghita on the Caribbean island of Saint Martin in a joint FBI and French Gendarmerie operation after months on the run for an alleged insider theft of government crypto holdings. FBI Director Kash Patel announced the arrest and shared photos of Daghita in handcuffs and a suitcase containing cash and hardware wallets, saying the bureau will continue to pursue those who defraud US taxpayers worldwide.

Daghita is accused of siphoning more than 46 million dollars worth of cryptocurrency, often described as Bitcoin and other assets, from wallets controlled by the US Marshals Service and used to hold seized crypto from prior enforcement actions.

2. How An Insider Could Steal Government Crypto

Daghitas father, Dean Daghita, runs Command Services & Support (CMDSS), a Virginia based contractor hired to help the US Marshals Service manage and dispose of seized digital assets. Reports say John had access linked to that role and allegedly moved funds out of government seizure wallets into his own.

Blockchain investigator ZachXBT had already published chat logs and on chain traces tying Daghita to wallets that held tens of millions in crypto connected to government seizures, prompting the Marshals Service to open a formal investigation. On chain data reportedly shows movements of assets such as Ether and Bitcoin from wallets associated with US government seizures into addresses controlled by Daghita.

3. Why This Matters For Crypto Users

This case shows that even highly resourced custodians can be vulnerable not only to external hacks, but also to insiders with privileged access and weak oversight. For the US, it raises questions about how a contractors family member could allegedly drain part of what some reports describe as a strategic crypto reserve, and whether current controls around key management, multi signature policies, and auditing are sufficient.

For the broader market, there is little immediate price impact, but it is a high profile reminder that operational security and governance at any custodian, public or private, are critical parts of crypto risk.

Conclusion

The arrest of John Daghita ties up one of the most striking insider theft cases in US government crypto custody, with more than 46 million dollars in seized assets allegedly diverted. As the legal case proceeds and authorities seek to recover funds, the bigger impact is likely to be behind the scenes, in how governments and large custodians harden their processes for holding and moving digital assets.