A suspect accused of stealing tens of millions of dollars in cryptocurrency from wallets tied to the U.S. Marshals Service has been arrested in an international operation involving U.S. and French authorities.
According to a statement posted on X by FBI Director Kash Patel, John Daghita, described as a U.S. government contractor, was arrested on the island of Saint Martin by the French Gendarmerie’s elite tactical unit in a joint operation with the FBI.
Patel said Daghita allegedly stole more than $46 million in cryptocurrency from the U.S. Marshals Service, the federal agency responsible for managing assets seized in criminal investigations.
The operation involved cooperation with the International Cooperation Team Serious Crime Unit of the French Gendarmerie in Saint Martin and the Groupe d’intervention de la Gendarmerie nationale of Guadeloupe, Patel added.
Authorities have not yet released additional details about the specific charges or the mechanism through which the alleged theft occurred.
Alleged link to U.S. government crypto seizure wallets
The case appears connected to earlier allegations that funds had been improperly moved from wallets associated with U.S. government crypto seizures.
The U.S. Marshals Service is responsible for custody and liquidation of digital assets confiscated in federal criminal cases. This role has become increasingly significant as law enforcement agencies accumulate large crypto holdings from seizures and forfeitures.
In recent years, the agency has relied on external contractors to help manage technical aspects of digital asset storage and disposition.
While authorities have not publicly detailed the operational link between the suspect and the seized funds, Patel’s statement described Daghita as a government contractor, suggesting potential access through government-related infrastructure.
Earlier on-chain investigation drew attention to suspected theft
The alleged theft first drew attention in January after blockchain investigator ZachXBT published a series of posts examining suspicious wallet activity tied to a person identified as “John.”
According to the investigation, several wallets linked to the individual had moved tens of millions of dollars in cryptocurrency. It included transactions involving thousands of ETH.
ZachXBT alleged that some of the funds could be traced to addresses associated with U.S. government seizure wallets. However, the claims were not independently confirmed at the time.
The investigator also suggested that the individual might be John Daghita, but said additional verification was needed.
In subsequent updates, ZachXBT said the suspect continued interacting on Telegram. Also, he even transferred a small amount of cryptocurrency to the investigator’s public wallet address.
Government agencies began reviewing the incident
Following the public allegations, U.S. officials acknowledged they were examining the matter.
ZachXBT later reported that the U.S. Marshals Service and officials connected to the White House’s digital asset advisory group were reviewing the claims.
Today’s arrest marks the first confirmation from law enforcement that authorities were pursuing a case linked to the suspected theft.
Crypto custody risks remain under scrutiny
Unlike traditional assets, crypto holdings require specialized custody infrastructure, including private key management and blockchain transaction monitoring.
As governments accumulate larger crypto reserves through seizures and forfeitures, the systems used to safeguard those assets have become a critical security concern.
Authorities have not yet confirmed whether any of the allegedly stolen funds have been recovered.
Final Summary
- The FBI confirmed the arrest of John Daghita in Saint Martin in connection with an alleged $46M cryptocurrency theft from the U.S. Marshals Service.
- The case follows earlier on-chain investigations that flagged suspicious wallet activity tied to funds believed to originate from government seizure addresses.
