FBI Arrests Court Security Officer in Cryptocurrency Theft Case, $46 Million Stolen Mystery Unveiled

The Federal Bureau of Investigation (FBI) Director Kash Patel announced on social platform X on Thursday that the FBI has arrested John Daghita on the Caribbean island of Sint Maarten. Daghita is the son of Dean Daghita, President of Command, Service & Support Company (CMDSS). He is suspected of illegally accessing cryptocurrency wallets managed under the U.S. Marshals Service Federal Asset Protection Program, involving over $46 million.

Details of the Arrest Announcement: Items Seized and Unanswered Questions

(Source: Kash Patel X)

FBI Director Kash Patel’s post on X revealed some of the results of the operation, with a list of items seized on-site indicating that investigators are actively searching for digital clues related to the stolen assets. However, Patel did not disclose whether any of the stolen cryptocurrency funds have been recovered, leaving the final destination of the $46 million still unresolved.

Full Case Overview: From ZachXBT Tracking to FBI’s Official Arrest

The public investigation into this case began in January this year when blockchain investigator ZachXBT traced a wallet linked to Daghita, holding approximately $23 million in digital assets. These assets are suspected to originate from over $90 million in cryptocurrency seized by U.S. authorities between 2024 and 2025. Dean Daghita, John Daghita’s father, is responsible for CMDSS, which secured a contract with the U.S. Marshals in 2024 to safeguard these seized assets, forming a typical internal theft scheme within regulatory oversight.

Key Timeline of the Case

• 2024: CMDSS obtains a contract with the U.S. Marshals to hold government-seized cryptocurrencies.
• January 2025: ZachXBT publicly discloses a wallet linked to Daghita holding about $23 million via on-chain tracking.
• January 26, 2025: Patrick Wieth, Director of the White House Cryptocurrency Committee, states on X that they are “handling the matter.”
• March 2026: The FBI, in cooperation with the French Gendarmerie, arrests John Daghita on Sint Maarten.

The U.S. Marshals confirmed that they launched an investigation following ZachXBT’s disclosure. As of Thursday, Patrick Wieth has not publicly commented on the arrest.

Global Coordination: South Korea Also Investigates Government Crypto Asset Management Gaps

This FBI arrest is among the latest cases of law enforcement agencies worldwide recovering stolen assets. In February 2026, South Korean police arrested two individuals related to the theft of 22 Bitcoin (BTC)—assets seized in 2021 after a hacking attack on a Korean exchange, later stored in a third-party cold wallet and stolen.

Following the incident, South Korea’s Vice Prime Minister and Minister of Strategy and Finance, Koo Yun-cheol, stated that the government and relevant agencies will conduct a comprehensive “review of the current state and management practices of digital assets held and managed by government and public institutions,” indicating that the security of crypto asset custody has become a policy priority.

Frequently Asked Questions

How was John Daghita tracked and arrested by the FBI?

In January 2025, blockchain investigator ZachXBT first traced a wallet related to Daghita on the blockchain ledger, discovering it held about $23 million in crypto assets consistent with the flow of assets seized by the U.S. government, and publicly disclosed the investigation results. Subsequently, the U.S. Marshals confirmed the investigation, and the FBI launched a formal pursuit, ultimately arresting Daghita across borders on Sint Maarten.

Why was CMDSS awarded the U.S. Marshals’ crypto custody contract?

As a custodial service provider, Dean Daghita’s CMDSS obtained the contract with the U.S. Marshals in 2024. The case exposed vulnerabilities in government outsourcing of digital asset custody, raising widespread concerns about third-party security and conflict of interest management in crypto asset safekeeping.

Can the stolen $46 million in crypto be recovered?

As of Kash Patel’s announcement of the arrest, the FBI has not disclosed any recovered assets. The seized hardware wallets, USB drives, and equipment indicate investigators are actively searching for digital trail clues, but the final recovery depends on subsequent legal procedures and progress in on-chain asset tracking.