US Marshals Probe Allegations of $40M Seized Crypto Theft

U.S. authorities have opened a formal inquiry into claims that a federal asset-custody program was exploited to siphon crypto seized by government agencies. The focus centers on John Daghita, the son of CMDSS president Dean Daghita, and whether unauthorized access to wallets tied to the government’s asset-protection program enabled transfers from assets believed to have been seized in 2024 and 2025. Crypto researchers say wallets associated with Daghita hold roughly $23 million in digital assets that are connected to as much as $90 million seized by the government in recent years. A separate trace also points to a wallet containing 12,540 Ether, valued around $36 million at the time, linked to Daghita. A spokesman for the U.S. Marshals Service told reporters that the matter is under investigation and declined to comment further as officials review the claims.

The claims gained visibility after crypto sleuth ZachXBT traced activity to wallets connected to the Daghita family. In a series of disclosures, ZachXBT reported that a wallet tied to Daghita appeared to hold significant holdings originating from addresses associated with confiscated government funds. The investigation also touched on a transfer in which John Daghita allegedly sent a small amount of stolen funds to ZachXBT’s public wallet address. In a Monday X post, the researcher wrote: “John […] sent me 0.6767 ETH ($1.9K) of the stolen government funds from 0xd8bc to my public wallet address.” He added: “Any stolen funds received will be sent to a USG seizure address.”

Key takeaways

• U.S. Marshals Service has opened an official inquiry into allegations that a contractor’s family member accessed wallets tied to the seized-crypto program and moved funds.
• ZachXBT identified wallets associated with Daghita containing about $23 million in crypto and linked to as much as $90 million in assets believed seized by the government in 2024–2025.
• A wallet holding 12,540 Ether is tied to Daghita, with the Ether valued at roughly $36 million at the time of the discovery.
• Investigators documented a purported transfer of a small amount of stolen funds—0.6767 ETH (~$1,900)—to ZachXBT’s public wallet, raising questions about leakage and custody safeguards.
• CMDSS—led by the contractor’s father—secured a 2024 contract with the U.S. Marshals Service for custody of seized crypto, highlighting potential conflicts of interest and the need for robust governance.
• Public data on government-held crypto suggests substantial exposure, with estimates indicating hundreds of thousands of Bitcoin may be under government control, a figure that underscores the scale and regulatory implications of asset seizures.

Tickers mentioned: $BTC, $ETH

Market context: The case sits at the nexus of government custody of seized assets, private-security contractors, and the forensic tracing that has become a hallmark of crypto-era enforcement. As regulators scrutinize custody arrangements and risk controls around government-owned crypto, the outcome could influence policy discussions on asset protection, auditability, and how-chain analytics interact with on-chain custody.

Why it matters

The episode is more than a self-contained allegation; it tests the integrity of custody frameworks used for seized crypto and the governance around programs designed to safeguard those assets. If investigators establish gaps in access controls or oversight, it could trigger tighter procurement standards, independent audits, and stricter segregation of duties within custody arrangements that involve government funds. The involvement of CMDSS in a 2024 contract with the U.S. Marshals Service adds a layer of complexity, spotlighting the interplay between private contractors and public responsibilities in the burgeoning field of digital-asset stewardship.

From a market perspective, the broader crypto ecosystem remains sensitive to enforcement actions, regulatory signals, and the evolving oversight of custody services. The rumored scale of assets—tied to long-standing confiscations and major seizure programs—illustrates the potential liquidity and concentration risks within government-controlled holdings. Analysts warn that even allegations of improper access can ripple through liquidity expectations and custody-service pricing, especially for institutions that depend on robust risk controls and transparent reporting around seized assets.

Crucially, the case underscores the role of on-chain investigators and researchers in providing independent visibility. ZachXBT’s outreach and the subsequent public disclosures illustrate how open-source analytics can inform official inquiries, complementing traditional investigative channels. While the government has not publicly disclosed all findings, continuing forensic work and wallet tracing will likely shape both policy discussions and potential enforcement actions in the months ahead.

What to watch next

• Official updates from the U.S. Marshals Service regarding the status of the investigation and any forthcoming legal or administrative actions.
• Requests for information or subpoenas related to CMDSS and its involvement in custody contracts, as well as any related governance reforms.
• Ongoing wallet-trajectory reporting from ZachXBT and other on-chain researchers, including any new addresses tied to the case and any reported transfers to seizure addresses.
• Any regulatory or legislative developments that affect custody frameworks for seized crypto, including potential changes to procurement processes or audit requirements for contractors.
• Subsequent court filings, asset tracing results, or seizures that could clarify the scope of the government’s holdings and the pathways through which funds moved.

Sources & verification

• U.S. Marshals Service statements and inquiries related to custody of seized crypto and investigations into access controls.
• Public posts and wallet-tracing notes from ZachXBT outlining wallets associated with Daghita and their link to seized assets.
• Data from BitcoinTreasuries.NET estimating the scale of U.S. government-held Bitcoin and related historical seizures.
• Contract history showing CMDSS involvement in a 2024 custody arrangement with the U.S. Marshals Service for seized crypto.

Investigation tests the boundaries of custody and enforcement in seized crypto

In a landscape where government-held crypto intersects with private-sector custody and forensics, the unfolding inquiry into John Daghita’s alleged activity—and the broader questions it raises about governance—could recalibrate expectations for risk controls, transparency, and accountability. The narrative centers on a set of wallets that researchers claim connect to assets seized by the government, with investigators tying a portion of holdings to the Daghita family through 2024–2025 seizures. The initial claim—supported by wallet traces and public posts—posits that unauthorized access to wallets tied to the federal asset protection program may have enabled the transfer of substantial value. The exact scope of wrongdoing remains under review, and authorities have not disclosed detailed findings or charging information as of this writing.

What is clear is that the case lays bare critical questions about the adequacy of custody infrastructure for high-value assets and the safeguards that prevent misuse by insiders or linked parties. The involvement of CMDSS in a 2024 custody contract amplifies the importance of independent oversight and robust separation between asset-holding and operational functions within programs designed to manage seized crypto. In the meantime, the crypto community will watch for additional disclosures, including any new wallet analytics, further transfers, or regulatory actions that might result from the ongoing inquiry.

Patrick Witt, the director of the White House Crypto Council, commented on the developing story, saying he was “on it” in response to ZachXBT’s claims. The attorney-general- or regulator-led ecosystem is under pressure to demonstrate that seized assets are safeguarded, auditable, and resilient against internal or systemic risks. The outcome could influence future procurement criteria, governance standards, and the way custody providers are evaluated in high-stakes scenarios. As investigators continue to examine the evidence, market participants remain attentive to potential updates, recognizing that even routine governance matters can ripple through confidence in crypto custody and enforcement integrity.

https://platform.twitter.com/widgets.js

This article was originally published as US Marshals Probe Allegations of $40M Seized Crypto Theft on Crypto Breaking News – your trusted source for crypto news, Bitcoin news, and blockchain updates.