Pull to refresh
Logo
Daily Brief
Following
Why Ranks Sign Up
Federal cryptocurrency custody under scrutiny

Federal cryptocurrency custody under scrutiny

Rule Changes

Alleged Insider Theft Exposes Vulnerabilities in Government Digital Asset Management

January 28th, 2026: Marshals Service Confirms Active Investigation

Overview

The United States Marshals Service is investigating allegations that John Daghita stole more than $40 million from government wallets. Daghita's father is chief executive of a federal cryptocurrency custody contractor. The stolen assets were seized in criminal investigations.

A blockchain investigator publicly exposed wallet movements tracing back to the 2016 Bitfinex hack. Those assets are now part of the national Strategic Bitcoin Reserve, established by President Trump in March 2025.

The incident reveals a systemic vulnerability: the federal government has struggled for nearly a decade to secure its growing cryptocurrency holdings. A 2022 inspector general audit found the Marshals Service lacked adequate policies for storage, tracking, and disposal of seized digital assets. Multiple custody contracts have collapsed, and an alleged insider breach has put tens of millions at risk—raising questions about whether Washington can protect a reserve it wants to treat like a 'digital Fort Knox.'

Play on this story Voices Debate Predict

Key Indicators

$40M+
Alleged Theft
Cryptocurrency allegedly embezzled from government seizure wallets
$77M
Contract Portfolio
Total value of seized crypto assigned to CMDSS under 2024 contract
207,000
Federal Bitcoin Holdings
Estimated bitcoins held by the U.S. government as of March 2025
7
OIG Recommendations
Unresolved recommendations from 2022 audit of Marshals Service crypto management

Voices

Curated perspectives — historical figures and your fellow readers.

Ever wondered what historical figures would say about today's headlines?

Sign up to generate historical perspectives on this story.

Play

Exploring all sides of a story is often best achieved with Play.

Log in to play. Track your picks, climb the leaderboards. Log in Sign Up
Predict 4 ways this could play out. Contrarian picks score more — points lock when the scenario resolves. Log in to play
Timeline Five events from this story — drag them oldest to newest. Log in to play
Connections Sixteen names from the news. Find the four hidden groups of four. Log in to play

People Involved

Organizations Involved

Timeline

August 2016 January 2026

13 events Latest: January 28th, 2026 · 4 months ago Showing 8 of 13
Tap a bar to jump to that date
  1. Marshals Service Confirms Active Investigation

    Latest Official

    U.S. Marshals Service officially confirms investigation into alleged digital asset theft. White House Crypto Council director Patrick Witt signals he is reviewing the claims.

  2. CMDSS Goes Dark as Allegations Spread

    Response

    CMDSS deactivates website, X account, and LinkedIn page. Blockchain investigator reports Daghita deposited $35.2 million into Tornado Cash cryptocurrency mixer.

  3. Accused Launches $LICK Meme Coin

    Incident

    John Daghita launches a meme coin called $LICK on Pump.fun. Token briefly reaches $915,000 market cap before crashing 97% and being removed from the platform.

  4. Trump Signs Strategic Bitcoin Reserve Executive Order

    Policy

    President Trump establishes Strategic Bitcoin Reserve and Digital Asset Stockpile, directing that bitcoin from federal forfeitures be treated as reserve assets not to be sold.

  5. $20 Million Drained from Government Bitfinex Wallet

    Incident

    Approximately $20 million is transferred out of a government wallet holding seized Bitfinex funds. Most funds returned within 24 hours, but roughly $700,000 routed through instant exchanges is not recovered.

  6. CMDSS Awarded Marshals Service Custody Contract

    Contract

    Command Services & Support wins indefinite-delivery contract to manage seized cryptocurrencies requiring specialized custody. Wave Digital Assets protests the award.

  7. Marshals Service Issues Crypto Custody RFP

    Procurement

    Marshals Service solicits proposals for contractor to manage and dispose of 'Class 2-4 cryptocurrencies' with portfolio valued at $77.1 million.

  8. Inspector General Audit Finds Marshals Service Crypto Management Inadequate

    Oversight

    DOJ Inspector General releases report finding the Marshals Service lacks adequate policies for cryptocurrency storage, quantification, valuation, and disposal. Makes seven recommendations for improvement.

  9. DOJ Seizes $3.6 Billion in Stolen Bitfinex Funds

    Seizure

    Federal authorities arrest Ilya Lichtenstein and Heather Morgan, seizing approximately $3.6 billion in cryptocurrency from the 2016 hack—the largest financial seizure in Justice Department history.

  10. Bitfinex Exchange Hacked for 119,756 Bitcoin

    Origin

    Hackers steal approximately 119,756 bitcoins from cryptocurrency exchange Bitfinex, worth $72 million at the time. The theft would later be attributed to Ilya Lichtenstein.

Historical Context

3 moments from history that rhyme with this story — and how they unfolded.

February 2014

Mt. Gox Collapse and Insider Failures (2014)

Mt. Gox, then handling 70% of global Bitcoin transactions, revealed that approximately 850,000 bitcoins had disappeared through a combination of hacking and structural mismanagement. CEO Mark Karpelès was later arrested and charged with embezzlement and data manipulation. The collapse exposed how weak internal controls and poor key management could enable catastrophic losses at institutions trusted to custody digital assets.

Then

Mt. Gox declared bankruptcy. Karpelès was arrested and convicted of data falsification, though acquitted of embezzlement charges. Creditors waited over a decade for partial repayment.

Now

Japan created the first formal cryptocurrency exchange regulations. The incident established that custodial failures—whether from external hackers or insider malfeasance—could destroy institutions and erode trust in the entire cryptocurrency ecosystem.

Why this matters now

Like Mt. Gox, the CMDSS incident involves alleged insider access enabling theft from a trusted custodian. Both cases highlight how cryptocurrency's irreversibility makes custody security existential—once keys are compromised, assets can vanish in minutes.

1986-1990

Operation Ill Wind Defense Contractor Scandal (1986-1990)

The FBI's three-year investigation uncovered widespread bribery and fraud involving Pentagon officials and defense contractors. Melvyn Paisley, Assistant Secretary of the Navy, accepted hundreds of thousands in bribes to steer contracts. Deputy Assistant Secretary James Gaines was convicted of theft of government property. The scandal exposed how contractors with access to sensitive government programs could exploit insider positions for personal gain.

Then

Over 90 individuals and corporations were convicted. Multiple Pentagon officials served prison sentences. Defense procurement reforms were enacted.

Now

Established precedent that contractor access to government assets creates inherent risks requiring robust oversight. Led to enhanced procurement integrity rules still in effect today.

Why this matters now

Both cases involve contractors entrusted with government assets allegedly exploiting their access. The CMDSS incident suggests that even as asset classes evolve from defense hardware to digital currencies, the fundamental vulnerability—insider access without adequate oversight—persists.

August 2016 - November 2024

2016 Bitfinex Hack and Recovery (2016-2024)

Ilya Lichtenstein exploited vulnerabilities in Bitfinex's security to steal 119,756 bitcoins. He and his wife Heather Morgan spent years laundering the proceeds through complex cryptocurrency transactions. In 2022, federal authorities traced and seized $3.6 billion—then the largest financial seizure in Justice Department history. Lichtenstein pleaded guilty and received a five-year sentence.

Then

Lichtenstein sentenced to five years, Morgan to 18 months. Approximately $10 billion in assets ultimately recovered. Both were released early under First Step Act provisions.

Now

Demonstrated that blockchain's transparency enables forensic tracing of stolen funds years after theft. Also showed that seized cryptocurrency creates new custody challenges—the very funds recovered from this case are now allegedly at the center of the CMDSS theft.

Why this matters now

Directly connected: funds from the Bitfinex seizure were among those allegedly stolen in the current incident. The irony is stark—assets recovered through years of federal investigation may have been lost again through inadequate custody controls.

Sources

(11)