Alleged $40M US Government Crypto Theft Sparks Insider Access Concerns

A major crypto scandal in the United States has drawn intense scrutiny after allegations surfaced that John Daghita, known online as “Lick,” was involved in the theft of more than $40 million in cryptocurrency from US government seizure addresses. The case has raised serious concerns about insider access, government crypto custody, and the security of seized digital assets managed through private contractors.

The controversy is closely tied to Daghita’s father, the head of CMDSS, a Virginia-based IT firm that received a 2024 contract to support the US Marshals Service in managing, storing, and disposing of seized and forfeited cryptocurrency assets. According to reports, Daghita may have gained access to sensitive private crypto addresses through his father’s position, enabling the alleged theft. While the exact technical methods remain under investigation, blockchain analyst ZachXBT has traced at least $23 million to a single wallet believed to be linked to Daghita. Additional on-chain analysis suggests the total amount connected to the suspected activity could exceed $90 million, spanning transactions from 2024 through late 2025.

As the investigation gained public attention, CMDSS reportedly deleted its X (formerly Twitter) and LinkedIn accounts and removed employee and team information from its website. These actions fueled further speculation about the firm’s internal controls and response to the allegations. Despite this, Daghita was said to remain active on Telegram, where he allegedly flaunted assets tied to the theft and interacted with blockchain addresses already flagged by investigators. After ZachXBT’s disclosures, Daghita reportedly removed NFT usernames and changed his Telegram display name, complicating ongoing tracking efforts.

CMDSS has long held contracts with major US agencies, including the Department of Defense and the Department of Justice, intensifying concerns about the scope of insider risk and potential exposure of sensitive systems. Analysts are now calling for comprehensive audits, improved transparency, and stricter access controls in government-managed crypto operations. The Daghita case underscores a persistent weakness in crypto custody frameworks: even with advanced technology and oversight, human relationships and insider access remain critical vulnerabilities.