The FBI, in a joint international operation with French authorities, has arrested a suspect accused of stealing over $46 million in cryptocurrency from wallets managed by the U.S. Marshals Service (USMS). FBI Director Kash Patel announced the arrest of John Daghita, described as a U.S. government contractor, on the Caribbean island of Saint Martin. The arrest was carried out by the French Gendarmerie's elite tactical unit, the Groupe d'intervention de la Gendarmerie nationale (GIGN) of Guadeloupe, in cooperation with the FBI.
The case appears to be linked to wallets associated with U.S. government crypto seizures, a responsibility of the USMS. The agency has increasingly relied on external contractors for the technical management of seized digital assets. While authorities have not detailed the exact charges or the theft mechanism, Patel's statement identified Daghita as a contractor, suggesting potential insider access to government infrastructure.
The alleged theft first came to public attention in January 2026 after blockchain investigator ZachXBT published an analysis of suspicious wallet activity tied to an individual identified as "John." The investigation traced transactions involving thousands of ETH (Ethereum) and suggested some funds could be linked to U.S. government seizure addresses. ZachXBT later indicated the individual might be John Daghita.
Following these public allegations, U.S. officials, including the USMS and officials connected to the White House's digital asset advisory group, began reviewing the incident. The arrest marks the first official law enforcement confirmation of a case linked to the suspected theft. Authorities have not disclosed whether any of the stolen funds have been recovered.
The incident highlights ongoing security and custody risks as government agencies accumulate larger cryptocurrency reserves through seizures. The case underscores the critical need for robust private key management and monitoring systems for digital assets held by public institutions.
