U.S. authorities are investigating claims that over $40 million in cryptocurrency seized by law enforcement was stolen through insider access at a federal contractor.
The U.S. Marshals Service (USMS) confirmed it is looking into allegations involving Command Services & Support (CMDSS), a Virginia-based company managing certain seized digital assets for the government.
Blockchain investigator ZachXBT said that John “Lick” Daghita, the son of CMDSS’s president, may have accessed government-linked crypto wallets without permission and moved funds for personal use. ZachXBT reported the alleged theft to authorities and linked multiple wallets to assets connected with USMS.
The alleged activity first came to light from a private Telegram chat. ZachXBT claimed that John Daghita showed he could move millions of dollars from wallets tied to government seizures in real time. One wallet reportedly contained 12,540 ETH, worth roughly $36 million. Some funds may have been returned, but about $700,000 could not be recovered.
CMDSS holds an active federal contract to manage and dispose of certain seized digital assets. These include funds from major incidents, like the 2016 Bitfinex hack. It is still unclear how John Daghita gained access to the wallets or whether his father or the company’s internal systems were involved.
The allegations raise questions about how the U.S. government secures its cryptocurrency holdings. Officials control hundreds of thousands of BTC, worth tens of billions of dollars. Public records show the government holds 328,372 BTC, valued around $29 billion.
The investigation is ongoing, and USMS has not provided further comments.