US Marshals Probe $40M Theft After Contractor’s Son “Flexes” Seized Crypto on Telegram

The “Band for Band” Blunder

The US Marshals Service (USMS) has launched an investigation into allegations that John “Lick” Daghita, the son of a federal contractor, siphoned over $40 million from government-controlled cryptocurrency wallets. The probe follows a forensic exposé by on-chain sleuth ZachXBT, who traced the funds after Daghita allegedly screen-shared a wallet containing stolen assets during a wealth-flaunting argument on Telegram.

The breach, if confirmed, represents a catastrophic failure in the chain of custody for the US government’s digital asset stockpile, currently valued at over $30 billion.

The Receipt: From Telegram to Treasury

The investigation hinges on a digital slip-up during a “band for band” dispute, slang for comparing wealth, in a Telegram group chat. Daghita reportedly shared his screen to prove his liquidity, revealing an Exodus wallet holding $2.3 million in TRON-based assets. ZachXBT linked this wallet to a cluster of addresses that received 12,540 ETH ($36M) and other assets directly from US government seizure accounts, including funds connected to the 2016 Bitfinex hack recovery.

“Meet the threat actor John (Lick), who was caught flexing $23M in a wallet address directly tied to $90M+ in suspected thefts from the US Government in 2024.”. ZachXBT

The Contractor Connection

The security lapse appears to stem from Command Services & Support (CMDSS), a Virginia-based contractor headed by Dean Daghita, the suspect’s father. USMS records confirm CMDSS was awarded a contract in October 2024 to manage “Class 2-4” digital assets, typically altcoins and tokens not supported by major custodians like Coinbase or BitGo. The timeline aligns with a series of suspicious transfers, including an October 2024 incident where $20 million briefly left government wallets before being partially returned.

Market & Institutional Impact

While the stolen sum is a fraction of the US government’s holdings, the breach undermines confidence in the security infrastructure protecting the proposed Strategic Bitcoin Reserve. Patrick Witt, Director of the White House Crypto Council, acknowledged the severity of the allegations in a brief statement on X: “On it.”

The incident forces a re-evaluation of third-party vendor risks for sovereign crypto custody. The market remained largely unaffected, with Ethereum holding steady at $2,870, though the reputational damage to the USMS’s asset forfeiture program is immediate.