Son of U.S. government contractor, accused of stealing millions in seized crypto, arrested in France
John “Lick” Daghita was arrested in a joint FBI-France operation after allegations he siphoned tens of millions of dollars in crypto from government seizure wallets managed by his father’s company.
By Olivier Acuna|Edited by Nikhilesh De Mar 5, 2026, 5:11 p.m.
Make us preferred on Google
What to know:
- French and U.S. authorities arrested John "Lick" Daghita on the island of Saint Martin on Wednesday, alleging he stole tens of millions of dollars in cryptocurrency from the U.S. government.
- The arrest follows a monthslong U.S. Marshals Service investigation into claims that Daghita, whose father runs a government contractor managing seized crypto, diverted more than $46 million from government seizure wallets.
- The probe began after blockchain investigator ZachXBT alleged that Daghita controlled a wallet holding roughly 12,540 ETH, and U.S. officials are now expected to seek his extradition as the case moves forward.
French authorities arrested John "Lick" Daghita, who allegedly stole tens of millions in crypto from the U.S. government.
In an X post on Thursday, FBI Director Kash Patel confirmed Daghita had been arrested on Wednesday on the island of Saint Martin in a joint FBI and French Gendarmerie operation.
In his social media post, Patel included images of Daghita handcuffed and another one of a metal suitcase filled with packs of $100 bills and several USB and what appear to be hardware crypto wallets.
“[The] FBI will continue working 24/7 with our international partners to track down, apprehend, and bring to justice those who attempt to defraud American taxpayers, no matter where they try to hide,” Patel said.
The arrest caps off a monthslong investigation by the U.S. Marshals Service into whether Daghita, the son of a government contractor tasked with managing seized crypto funds, stole over $46 million from government seizure wallets.
Brady McCarron, chief of public affairs for the USMS, told CoinDesk in late January that an investigation into allegations that Daghita had stolen cryptocurrency were underway.
The law enforcement investigation began after blockchain sleuth ZachXBT publicly alleged that Daghita, the son of CMDSS president Dean Daghita, had siphoned tens of millions of dollars in digital assets from wallets associated with U.S. government seizures.
CMDSS is a Virginia-based contractor that advertises information technology and operational support services for U.S. government agencies, including the Department of Justice and Department of Defense. The company has previously been reported to hold contracts assisting the USMS with managing and disposing of cryptocurrency seized during criminal investigations.
The investigator said he alerted authorities after identifying a wallet holding roughly 12,540 ETH, worth more than $36 million at the time, that he alleged was controlled by Daghita.
Daghita first drew attention in online circles after appearing in a recorded dispute in a Telegram group chat with another alleged threat actor in what is known as a “band for band” exchange, where participants attempt to prove control of large crypto holdings.
With Daghita now in custody, U.S. authorities are expected to pursue extradition as the investigation continues.
U.S. Marshalsseized cryptoFederal bureau of investigationMore For You
Pudgy Penguins: Challenging the Pokemon and Disney Legacy in the Global IP Race
By CoinDesk ResearchFeb 27, 2026
Commissioned byPudgy Penguins
CoinDesk Research looks into how Pudgy Penguins disrupts traditional toys market via a phygital model. With 2M+ units sold, they scale via global partnerships and events.
What to know:
- Disrupting a Stagnant Market: Pudgy Penguins is utilizing a "Negative CAC" model to challenge the traditional $31.7B licensed toy industry by treating physical merchandise as a profitable user acquisition tool rather than just a final product.
More For You
Sanctions evasions using crypto increased by 700% in 2025: Chainalysis
By Olivier Acuna|Edited by Sheldon Reback1 hour ago
Russia, Iran and North Korea expanded their use of stablecoins, hacked funds and state-linked exchanges to move more than $100 billion onchain to evade international sanctions.
What to know:
- Sanctions evasion by state actors including Russia, Iran and North Korea drove crypto-related illicit finance to record levels in 2025, Chainalysis said.
- Ruble-pegged stablecoin A7A5 is a central conduit for sanctioned Russian businesses, processing more than $93 billion in transactions, it said
- Stablecoins account for roughly 84% of illicit crypto transaction volume, as Iran's Islamic Revolutionary Guard Corps and North Korean hackers increasingly rely on these assets to move billions of dollars.
Sanctions evasions using crypto increased by 700% in 2025: Chainalysis
1 hour ago
CleanSpark sold 97% of February bitcoin production to fund AI pivot
1 hour ago
Crypto for Advisors: Tokenization offers always-on global investment access
2 hours ago
Bitcoin pulls back to near $71,000 even as software sector soars
2 hours ago
CoinDesk 20 performance update: Stellar (XLM) drops 3.5% as nearly all assets decline
3 hours ago
Core Scientific secures up to $1 billion loan facility from Morgan Stanley
4 hours agoTop Stories
New York Stock Exchange owner values crypto exchange OKX at $25 billion in new partnership
5 hours agoTrump-backed American Bitcoin board members scoop up stock following earnings
6 hours ago
Bitcoin traders, alert: The rally is nearing a two-year 'make or break' price zone
10 hours agoAndreessen Horowitz crypto arm said to seek $2 billion for fifth fund: Fortune
6 hours ago