U.S. Contractor Arrested In Caribbean Over $46 Million Crypto Theft From U.S. Marshals

A U.S. government contractor accused of stealing tens of millions of dollars in cryptocurrency from the U.S. government has been arrested in the Caribbean following a coordinated international law enforcement operation.

According to authorities, John Daghita, a contractor who allegedly stole more than $46 million in digital assets tied to the United States Marshals Service (USMS), was captured on the island of Saint Martin. The arrest was carried out by the French law enforcement agency French Gendarmerie with assistance from the Federal Bureau of Investigation (FBI).

Officials said the arrest involved one of France’s most elite tactical units, the Groupe d’intervention de la Gendarmerie nationale (GIGN), operating out of Guadeloupe. The operation was conducted in close coordination with the French Gendarmerie’s International Cooperation Team and Serious Crime Unit based in Saint Martin.

The arrest represents a significant breakthrough in a case that has drawn attention from both the crypto industry and global law enforcement agencies.

Allegations Of A $46 Million Crypto Theft From Government Custody

Authorities allege that Daghita exploited his position as a contractor working with the U.S. Marshals Service to gain unauthorized access to seized cryptocurrency assets.

The USMS plays a critical role in managing digital assets confiscated in criminal investigations, often holding large reserves of cryptocurrency linked to cybercrime, fraud, and other illicit activities.

Investigators believe Daghita took advantage of this access to siphon off more than $46 million worth of digital assets, one of the most significant alleged insider crypto thefts tied to a U.S. government agency.

According to reports from investigators in the blockchain intelligence community, Daghita worked through CMDSS, a company operated by his father that reportedly held a contract with the U.S. Marshals Service. Through that position, he allegedly gained the ability to interact with sensitive systems and digital wallets tied to government-held crypto assets.

Authorities have not yet disclosed the full technical details of how the funds were removed, but the incident highlights the growing security challenges surrounding government custody of digital assets.

Blockchain Investigator ZachXBT Helped Expose The Scheme

One of the most notable figures connected to the investigation is well-known on-chain analyst ZachXBT, whose independent research played a key role in exposing the alleged theft.

Shortly after news of the arrest surfaced, ZachXBT publicly commented on the development, explaining that his earlier investigation had uncovered the trail linking Daghita to the missing funds.

In a statement shared on social media, the investigator wrote that the arrest occurred “as a direct result” of the investigative work that uncovered the wallet movements and connections tied to the suspect.

ZachXBT had previously revealed how the contractor allegedly misused privileged access through CMDSS, enabling him to divert funds from crypto wallets associated with seized assets.

Blockchain forensic techniques made it possible to track transactions and connect suspicious wallet activity to Daghita, helping authorities build a clearer picture of the alleged operation.

The case once again demonstrates how public blockchain transparency can assist investigators in identifying suspicious financial activity, even when sophisticated attempts are made to conceal it.

Suspect Allegedly Taunted Investigator Online

Adding a dramatic twist to the case, ZachXBT also revealed that Daghita allegedly taunted him online during the investigation.

According to the blockchain investigator, the suspect communicated with him multiple times through a Telegram channel while the investigation was ongoing.

In what appeared to be an attempt to mock the investigator, Daghita allegedly conducted a “dust attack”, a tactic where small amounts of cryptocurrency are sent to a public wallet address. In this case, the dust transactions were reportedly sent using some of the stolen funds.

Such behavior suggested the suspect was aware he was being investigated and attempted to provoke or challenge the investigator tracking the transactions.

For analysts familiar with blockchain investigations, the incident highlights the unusual dynamics that sometimes emerge between cybercriminals and the independent researchers who track illicit crypto movements.

FBI Emphasizes Global Cooperation In Fighting Crypto Crime

The arrest also underscores the increasing level of international cooperation required to pursue financial crimes involving digital assets.

The Federal Bureau of Investigation praised the collaboration between U.S. and French authorities that ultimately led to the suspect’s capture.

Officials specifically acknowledged the work of the French Gendarmerie’s International Cooperation Team Serious Crime Unit in Saint Martin and the elite GIGN tactical unit based in Guadeloupe for their role in coordinating the operation.

According to FBI leadership, the agency remains committed to pursuing individuals accused of defrauding the U.S. government or American taxpayers, regardless of where they attempt to hide.

The agency stated it will continue working around the clock with international partners to identify, track, and apprehend suspects involved in major financial crimes.

Case Highlights Growing Risks Around Crypto Custody

The case comes at a time when governments around the world are holding increasingly large amounts of cryptocurrency seized from criminal investigations.

Agencies like the U.S. Marshals Service often take custody of these assets after they are confiscated from hackers, darknet markets, fraud operations, and other illegal activities.

Managing these holdings requires sophisticated security systems, strict oversight, and trusted third-party contractors capable of maintaining digital infrastructure.

However, the allegations against Daghita highlight the potential vulnerabilities that can arise when individuals with privileged system access abuse their positions.

For the cryptocurrency industry, the case serves as a reminder that while blockchain transactions are transparent and traceable, the systems surrounding custody and access control remain critical points of risk.

At the same time, the investigation demonstrates the growing role of independent blockchain investigators and open-source intelligence in helping authorities track illicit crypto activity.

With the suspect now in custody following the operation in Saint Martin, investigators are expected to continue examining the full scope of the alleged theft, including the movement of the stolen assets and whether additional parties were involved.

For law enforcement agencies worldwide, the message from the arrest is clear: cryptocurrency crimes can cross borders quickly, but international cooperation and blockchain analysis are making it increasingly difficult for suspects to remain hidden.

Disclosure: This is not trading or investment advice. Always do your research before buying any cryptocurrency or investing in any services.

Follow us on Twitter @nulltxnews to stay updated with the latest Crypto, NFT, AI, Cybersecurity, Distributed Computing, and Metaverse news!