John Daghita Arrested After $46M Crypto Theft From U.S. Marshals Wallets

Steady attention without excessive speculation.

How the $46M Crypto Theft Unfolded

John Daghita, also known online as “Lick,” is a former U.S. government contractor and the son of the owner of Command Services & Support (CMDSS). He was arrested on March 4, 2026, on the Caribbean island of Saint Martin. The FBI worked with French elite tactical units to take him into custody.

Authorities say he stole more than $46 million in cryptocurrency from wallets controlled by the U.S. Marshals Service. These wallets were being managed by his father’s company under a government contract. The theft reportedly started in 2024. It came to light in late January 2026 when on-chain investigator ZachXBT traced the missing funds to wallets connected to Daghita.

ZachXBT Reacts to the Arrest

On chain investigator ZachXBT said the arrest of John Daghita came directly after his investigation exposed the alleged theft. In late January 2026, ZachXBT revealed that Daghita had stolen more than $46 million in seized crypto assets from the U.S. government by abusing his access at Command Services & Support (CMDSS), a company owned by his father that held a contract with the U.S. Marshals Service. According to ZachXBT, Daghita later mocked him through his Telegram channel and even sent small amounts of the stolen funds to his public wallet in a dust attack.

What to Watch Next

• Court proceedings and extradition: Watch if authorities extradite Daghita to the U.S. and when courts schedule formal charges or bail hearings.
  

• Fund recovery updates: Track how much of the $46M investigators recover from wallets, exchanges, or hardware devices seized during the arrest.
• Government custody reforms: Watch for statements from the U.S. Marshals Service or new protocols for contractors handling seized crypto assets.
• Follow-on investigations: Look for any additional arrests or on-chain probes triggered by ZachXBT’s tracing methods and this high-profile case.