US Government’s Bitcoin At Risk? The Insider Theft That Shocked The Community
On-chain sleuth ZachXBT has revealed the id of a risk actor who stole over $40 million from the U.S. government’s crypto stash. The White House has confirmed that it’s trying into the scenario however has not but stated whether or not its Bitcoin holdings have been affected by the theft.
How This Threat Actor Stole Over $40 Million From the U.S. Government Crypto Wallets
In an X post, ZachXBT revealed that risk actor John Daghita, also referred to as Lick, stole over $40 million from the U.S. authorities’s seizure addresses, as his dad owns Command Services & Support (CMDSS), which has an lively IT authorities contract. CMDSS was awarded a contract to help the U.S. Marshals in managing and disposing of seized and forfeited crypto belongings. However, the ZachXBT famous that it stays unclear how John obtained entry from his dad.
The CMDSS firm X account, web site, and LinkedIn have been all deactivated following ZachXBT’s revelation. Meanwhile, the crypto investigator had first drawn consideration to John in an earlier X post, stating that the risk actor had been caught flexing $23 million in a pockets tackle.
He famous that this pockets was instantly tied to over $90 million in suspected thefts from the U.S. Government in 2024 and a number of different unidentified victims from November 2025 to December 2025. John revealed this crypto pockets throughout a heated argument with one other risk actor, Dritan Kapplani Jr., in a bunch chat about who had extra funds of their crypto wallets.
The Source Of The Funds
Following John’s messages, ZachXBT traced the supply of the risk actor’s funds to a pockets (0xc7a2) that acquired $24.9 million from a U.S. Government tackle in March 2024 associated to the Bitfinex hack seizure, which was a theft from the federal government. John’s pockets (0xd8bc), which he confirmed off throughout the heated argument, can be stated to be tied to $63 million in inflows from suspected victims and government-seizure addresses within the fourth quarter of final 12 months.
John shortly eliminated all the NFT usernames from his Telegram account and adjusted his display screen identify after ZachXBT’s publish. Meanwhile, it’s price noting that the crypto investigator recognized John as John Daghitia after rumors started circulating that the risk actor was the identical individual beforehand arrested in September 2025. However, it stays unclear for what John was arrested final 12 months.
Is The U.S. Government’s BTC At Risk?
White House crypto adviser Patrick Witt confirmed in an X post that they’re investigating the theft and can present an replace quickly. This improvement can be vital, as U.S. President Donald Trump has already signed an government order that allocates all U.S. authorities Bitcoin holdings to the Strategic BTC Reserve.
Based on the timeline of those thefts from the federal government’s seizure addresses, John appears to have stolen a few of these crypto belongings after Trump signed the manager order. Meanwhile, a part of the theft occurred underneath the Biden Administration. There has but to be affirmation from the federal government on how a lot BTC it holds. However, BiTBo data exhibits that the U.S. authorities presently holds 198,012 BTC.
