FBI Nabs Suspect in $46M US Marshals Crypto Theft – Breaking News

A high-stakes international operation has culminated in the arrest of a suspect accused of orchestrating a $46 million cryptocurrency theft from the U.S. Marshals Service. The arrest, confirmed by FBI Director Kash Patel, marks a significant breakthrough in a case that has raised serious concerns about the security of government-held digital assets.

Arrest in Saint Martin Caps Months-Long Investigation

Federal authorities apprehended John Daghita—identified as the son of a U.S. government contractor—on March 5, 2026, on the Caribbean island of Saint Martin. The arrest was executed in collaboration with the French Gendarmerie’s elite tactical units, including the International Cooperation Team Serious Crime Unit and the Groupe d’intervention de la Gendarmerie nationale of Guadeloupe .

FBI Director Kash Patel announced the arrest via a post on X, stating: “Last night, John Daghita — a U.S. government contractor who allegedly stole more than $46 million in cryptocurrency from the U.S. Marshals Service — was arrested on the island of Saint Martin by the French Gendarmerie’s premier elite tactical unit in a joint operation with the FBI.” .

Inside Job: How the Theft Unfolded

John Daghita is the son of Dean Daghita, president and CEO of Command Services & Support (CMDSS), a Virginia-based firm awarded a $4 million contract in October 2024 to manage seized cryptocurrency assets for the U.S. Marshals Service .

The theft came to light in January 2026 when blockchain investigator ZachXBT traced stolen funds back to Daghita. The trail began after Daghita allegedly shared a screen recording of his Exodus wallet during a Telegram argument, revealing millions in crypto holdings. On-chain analysis linked those wallets to government-seized assets, including funds from the 2016 Bitfinex hack .

Initial estimates placed the theft at around $40 million, but the FBI later confirmed the total at approximately $46 million .

Implications for Government Crypto Custody

This case underscores the vulnerabilities inherent in outsourcing the custody of government-held digital assets to private contractors. Analysts highlight several key weaknesses:

• Insufficient access controls for contractor personnel
• Inadequate transaction monitoring of government crypto wallets
• Lack of conflict-of-interest safeguards
• Delayed detection of unauthorized transfers

The U.S. Marshals Service has initiated an internal investigation, and the Department of Justice is expected to review all cryptocurrency management contracts in light of this breach .

Expert Insight

According to Patrick Witt, executive director of the President’s Council of Advisors for Digital Assets, the case highlights the urgent need for stronger oversight and transparency in government crypto operations. “This incident demonstrates how quickly digital asset custody can be compromised without robust controls,” Witt said .

Blockchain security experts also emphasize the role of forensic analysis in uncovering such crimes. “On-chain tracing tools were critical in linking the suspect to stolen funds,” noted a leading crypto investigator, underscoring the importance of transparency in blockchain networks.

What Happens Next?

Extradition proceedings are expected to bring Daghita to the United States to face formal charges. As of March 5, 2026, no court filings have been made public .

The U.S. Marshals Service and the FBI are likely to implement stricter protocols for contractor oversight, including enhanced auditing, real-time transaction monitoring, and conflict-of-interest disclosures.

Broader Context and Significance

This case arrives at a critical moment as policymakers debate the establishment of a U.S. strategic Bitcoin reserve. The breach raises questions about the feasibility and security of government-held cryptocurrency reserves .

Moreover, the incident may prompt broader reforms across federal agencies that handle digital assets. The DOJ may consider centralizing custody operations or imposing stricter vetting standards for contractors.

Conclusion

The arrest of John Daghita in Saint Martin marks a pivotal moment in the fight against crypto-enabled insider crime. The $46 million theft from U.S. Marshals Service wallets has exposed significant flaws in government asset management and highlighted the power of blockchain forensics in modern investigations. As extradition and legal proceedings unfold, the case is poised to reshape how federal agencies secure and oversee digital assets.

Frequently Asked Questions

What exactly is the “$46M US Marshals crypto theft”?

It refers to the alleged theft of approximately $46 million in cryptocurrency from wallets managed by the U.S. Marshals Service, which were under the custody of a contractor’s firm.

Who is John Daghita?

John Daghita is the son of Dean Daghita, CEO of CMDSS, a contractor that managed seized crypto assets for the U.S. Marshals Service. He was arrested in Saint Martin on March 5, 2026, in connection with the theft.

How was the theft discovered?

Blockchain investigator ZachXBT traced stolen funds after Daghita allegedly shared a screen recording of his crypto wallet during a Telegram argument. On-chain analysis linked the wallets to government-seized assets.

What vulnerabilities did this case expose?

The case revealed weaknesses in contractor access controls, transaction monitoring, conflict-of-interest safeguards, and delayed detection of unauthorized transfers.

What are the next steps in the case?

Extradition proceedings are expected to bring Daghita to the U.S. for formal charges. Meanwhile, the DOJ and U.S. Marshals Service are reviewing and strengthening protocols for managing government-held digital assets.

How might this impact future government crypto policy?

The incident may lead to stricter oversight of contractors, enhanced auditing and monitoring systems, and possibly a reevaluation of how the government stores and manages cryptocurrency reserves.