US Investigates Alleged $90M Crypto Theft Linked to Government Contractor’s Son

Federal authorities are probing a suspected breach of government-controlled cryptocurrency accounts involving at least $90 million in digital assets. The investigation centers on wallets tied to seized funds managed by the US Marshals Service, with blockchain patterns suggesting thefts occurred between late 2025 and early 2026.

Social media analysis by investigator ZachXBT revealed screenshots of suspicious wallet activity during a Telegram dispute. The alleged perpetrator—identified as John Daghita, son of a defense contractor executive—reportedly boasted about holdings traceable to DOJ-seized crypto. Forensic chains indicate assets moved through privacy coins like XMR and mixers before conversion to stablecoins.

The case highlights systemic vulnerabilities in custodial management of seized crypto assets. As prosecutors increasingly use digital asset forfeitures in financial crime cases, this incident may prompt stricter controls over third-party contractors handling government-held blockchain wallets.