On-chain investigator ZachXBT has publicly named the person he says is responsible for siphoning more than $40 million from U.S. government crypto seizure addresses — a revelation that has prompted a White House review. ZachXBT identified the alleged thief as John Daghita (also reported as John Daghitia), who operates under the handle “Lick.” The investigator says Daghita’s connection to the seized funds stems from his father’s company, Command Services & Support (CMDSS), which holds an active government contract to assist the U.S. Marshals Service with managing and disposing of seized and forfeited crypto assets. How Daghita would have gained access to those assets remains unclear. After the disclosure, CMDSS’s X account, website, and LinkedIn were taken offline. The case unfolded after ZachXBT flagged a wallet in which Daghita had been flaunting roughly $23 million during a heated group-chat argument with another threat actor, Dritan Kapplani Jr. That display led to tracing multiple linked wallets and transactions. ZachXBT says those wallets are directly tied to more than $90 million in suspected thefts from U.S. government seizure addresses during 2024 — and to additional unidentified victims between November and December 2025. Key on-chain links called out by the investigator include: - A wallet (0xc7a2) that received $24.9 million in March 2024 from a U.S. government address connected to the Bitfinex hack seizure. ZachXBT alleges those funds were diverted. - The wallet Daghita showed off (0xd8bc), which ZachXBT ties to roughly $63 million in inflows from suspected victims and government-seizure addresses in Q4 2025. Following the post, Daghita reportedly scrubbed NFT usernames from his Telegram account and changed his screen name. ZachXBT also noted online rumors that the individual may have been arrested in September 2025, though details and charges from that arrest — if it occurred — remain unclear. The White House has acknowledged the matter. Patrick Witt, a White House crypto adviser, said via X that investigators are looking into the alleged theft and will provide updates. The situation takes on extra significance because President Donald Trump has issued an executive order directing the U.S. government’s Bitcoin holdings into a Strategic BTC Reserve; ZachXBT’s timeline suggests some of the disputed movements occurred after that order, while other transfers took place under the prior administration. The government has not publicly confirmed whether its official Bitcoin holdings were affected. Independent on-chain tracker BiTBo (per ZachXBT’s report) shows the U.S. government currently holding about 198,012 BTC — but official confirmation and a full accounting of any missing assets are pending as investigators probe the allegations. Read more AI-generated news on: undefined/news

#BTC #NFT