Blockchain investigator ZachXBT has alleged that a person linked to a multimillion-dollar theft from U.S. government crypto wallets is the son of an executive at a firm contracted by the U.S. Marshals Service (USMS) to manage seized digital assets.

According to the investigation, an individual known online as “Lick,” identified as John Daghita, is suspected of siphoning tens of millions of dollars in crypto. ZachXBT further claims he is the son of Dean Daghita, president of Command Services & Support (CMDSS), a company awarded a 2024 contract to help the USMS custody and dispose of certain categories of seized cryptocurrencies.

The allegations stem from on-chain tracing and online activity, including a recorded dispute in which the suspect allegedly displayed control of wallets holding millions of dollars. Funds were traced back to a government-linked wallet associated with assets seized from the 2016 Bitfinex hack. While most previously flagged stolen funds were recovered, a portion remains missing.

No charges have been filed, and the claims have not been tested in court. CMDSS did not respond to media requests for comment. The company’s government contract had already faced scrutiny in the past, including a formal protest over licensing and potential conflicts of interest, though that challenge was ultimately denied. Broader reports have also highlighted operational difficulties within the USMS in tracking and managing its seized crypto holdings.