Dean Daghita / CMDSS (Command Services and Support)
Auto-generated score, not yet verified against the scoring model. Under review — treat as indicative, not a verdict.
anchored·2v1fYV…cunDSummary
Command Services and Support, Inc. (CMDSS) is a Haymarket, Virginia-based Service-Disabled Veteran-Owned Small Business led by president and CEO Dean Daghita that received a U.S. Marshals Service contract in October 2024 to manage and dispose of Class 2-4 seized cryptocurrency. In January 2026, blockchain investigator ZachXBT publicly alleged that Daghita's son, John Daghita (alias 'Lick'), had stolen over $46 million in digital assets from government-controlled USMS wallets by abusing insider access obtained through his father's company. John Daghita was arrested in Saint Martin on March 4, 2026, and was subsequently indicted on 15 federal counts; Dean Daghita himself had not been charged as of August 2026, though CMDSS's online presence was taken offline following the revelations and the company faces significant scrutiny over contract award process and oversight failures.
Connected Entities
4 entities · 60 linked investigations- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→ZachXBT(70%)
- Dean Daghita / CMDSS (Command Services and Support)→mentioned with→ZachXBT(70%)
- Dean Daghita / CMDSS (Command Services and Support)→mentioned with→John Daghita (aka Lick) — US Marshals Crypto Theft(80%)
- Dean Daghita / CMDSS (Command Services and Support)→mentioned with→Bitfinex Hack(80%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Dean Daghita / CMDSS (Command Services and Support)(80%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Bitfinex Hack(80%)
- ZachXBT→mentioned with→John Daghita (aka Lick) — US Marshals Crypto Theft(80%)
- ZachXBT→mentioned with→Dean Daghita / CMDSS (Command Services and Support)(80%)
Connected Through
4 shared actors · 451 investigationsDistinct actors this investigation shares with others — holders, traders, and named parties. Shared infrastructure (exchanges, pools) is excluded.
- □ZachXBTorganizationalso inGurhan Kiziloz·0Gurhan Kiziloz (BlockDAG Co-Founder)·0$91M Bitcoin Social Engineering Theft — Hardware Wallet Impersonation (August 2026)·0Blockchain Bandit·0Faris Ali / UK Crypto Home Invasion Ring·0Yelo (yelotree)·0Lab·0H2 2026 July Bridge Hack Wave — Seven Attacks, $M+ Lost·0Wojtek Kulisz aka Merry (SIM-Swap Gang)·0Ben 'BitBoy' Armstrong·0Inferno Drainer·0DSJEX / BG Wealth Sharing·0Poland SIM-Swap Crypto Theft Ring — June/July 2026·0LastPass threat actor·0Fake Trezor Support Social Engineering — $282M Heist·0LAB / LABUSDT·0Chris Larsen·0Gamer Crew $263M Social Engineering Ring (New Defendants)·0Drift Protocol DPRK Exploit (April 2026)·0fake Ledger Live app·0Malone Lam·0LAB Token (LabsAI)·0Tiffany Milanovich·0AscendEX — Insolvency and Withdrawal Freeze (July 2026)·0Malone Lam Crypto Syndicate·0Broox Bauer / Axiom Insider Trading Ring·0Swift Wave Capital·0EVM Cross-Chain Wallet-Drain Campaign (June 2026)·0DPRK·0DSJEX / BG Wealth Sharing Ponzi·0AscendEX (BitMax)·0John Daghita (aka Lick) — US Marshals Crypto Theft·0Fake MetaMask Update Phishing Campaign (May 2026)·0Apple App Store — Systematic Fake Crypto Wallet Cluster (26 Apps, April 2026)·0CREAM Lending·0Pump.fun·0263M RICO Social Engineering Crypto Theft Gang (DC — 2024-2026 Prosecutions)·0Fake Hyperliquid App·0Heisenberg Guru (HSBG)·0Cream Finance·0StableMagnet·2AnubisDAO·2SudoRare·2Jonathan Spalletta·2Aman Kesar India Crypto Scam Ring·2HQI Exchange·2Trenton Richard Johnston·2Blur Finance·2ETHTrustFund·2Gotbit·2HyperVault·2Bitforex·2Wiz Khalifa Pump Fun·2Iran War Panic Crypto Scam Network (ORAMAMA / X Account Manipulation)·2Mr. Parveen India Social Engineering Scam Ring·2Aqua·2eXch·2Malone Lam·2Vkevin·2AnubisDAO·2Transit Finance·2Marlon Ferro (GothFerrari)·2Wojtek Kulisz ('Merry') — SIM Swap Crypto Theft Ring·2Leva Heal Limited (Fake Ledger Live App - Apple App Store)·2Faris Ali·2RaveDAO·2MangoFarmSOL·2Veer Chetal·2AI Fake X Account Crypto Scam Network 2026·2Magnate Finance·2NFTMachine·2Glori Finance·2ArbiSwap·2Trenton Johnston — Crypto Social Engineering Theft Ring·2RiskOnBlast·2ORAMAMA X War-Panic Scam Network·2Aquabot (AQUA)·2Kokomo Finance·2M1llionz (RichMilly666)·3AudiA6 Mixing Service·3ORAMAMA Token ($ORAMAMA)·3Sahil Arora·3ZKasino·3Garden Finance Cross-Chain Bridge — July 2026 Solver Database Exploit·3LAB Token (Smartliquid AI)·4AscendEX Exchange·4Brandon Michael Tardibone·4RaveDAO (RAVE Token)·4LML/USDT staking protocol·4Raidparty·4Friend Tech·47zarc·4Crypto Beast (ALT Token Influencer)·4LAB Token·4Axiom Exchange·4Meerkat Finance·4LAB Token (AI Terminal / Vova Sadkov)·4CrediX Finance·4Merlin DEX·4DogWifTools·4Ashcrypto — ROYA Token Pump-and-Dump·4Crypto Beast·4Safe Dollar·4BlockDAG Network·4Uranium Finance·4Undisclosed KOL Promo Network (ZachXBT Exposé, September 2025)·5Grand Base·5WallStreetBets·5JELLY·5GANA Payment·5Nobitex·50x327a81d0d128db8886d265be73c9fdda97194f30·5LuBian·5Sportsbet·6Rivus DAO·8Wonderland Finance·8Axiom DEX Insider Trading (Broox Bauer)·8C&M Software·8ValueDefi·8UwuLend·8James Wynn·8pump.fun·8Trove Markets·8SUNRAY·FINANCE·8Humanity Protocol June 2026 Exploit·8SIREN Token·9MemeCore (M Token)·9Nobitex June 2025 Hack (Predatory Sparrow)·10Sheldon Xia (BitMart Founder)·10UwU Lend·10xToken·10AlphaPo·10Munchables·10Phemex·10PolyNetwork·10PrismaLST·10FixedFloat·10Abracadabra Spell·10US Government Crypto Wallet·10BearnFi·12Rain Protocol (RAIN Token)·12Meteora / Benjamin Chow·12Abracadabra Money MIM Depeg June 2026·12ZachXBT Crypto Influencer Paid-Promotion Leak (200+ Influencers, September 2025)·12Gym Network·12Popsicle Finance·12LastPass·12Masa·12Tapioca DAO·12Harmony Protocol (2026 ONE Token Exploit and L1 Shutdown)·12Dough Finance·12LND·12Soulja Boy (DeAndre Cortez Way)·12MyAlgo·12Undisclosed KOL Paid-Promotion Network (2025)·12Vee Finance·12ElementalDeFi·12pNetwork·12Cypher Protocol·12Indexed Finance·12Uwerx·12Humanity Protocol H Token Hack·13Terence Kwok — Humanity Protocol Staged Hack·14Ionic Money·14Shawn Liu·14Garden Finance·14Garden·14Rain Protocol·14AutoShark Finance·14ARA Finance·14Bybit v. DPRK Lazarus Group -- $1.5B Hack Civil Lawsuit (August 2026)·14Arthur Hayes — Maelstrom CIO Exit Liquidity Allegations·14Austin Fine (@xmrfine)·18MoonHacker·18JUDAO·18Skyward Finance·18Cyrus Finance·18Humanity Protocol June 2026 Hack·18Kroll·18Cetus CLMM·18Noones·18Concentric·18Alpha Finance Lab·18HyPC·18OKX DEX·18Convergence·18OcelotDex·18BTC24H·18CheeseBank·18Ionic Protocol·18LaunchZone·18MonoSwap·18WAYGU CASH·18Broox Bauer·18Humanity Protocol - Staged Hack Allegation (ZachXBT)·18Axiom DEX·18Ashcrypto·18Stabble·18Wasabi Protocol·18Eesee (Abandoned NFT Marketplace by LAB Founders)·18RIVER Token·18TMX TRIBE·18Siren (SIREN)·18BitcoinDepot·18ForceBridge·201EU2pMence1UfifCco2UHJCdoqorAtpT7·20FEGex·22EdgeX / EDGE Token·22XT Exchange·22ElasticSwap·22DeltaPrime·22Ratio Finance·22Locus Finance·22Wise Lending V1·22Axiom DEX Employee Insider Trading·22FutureSwap·22Shido·22Earning.Farm·22Eclipse·22RocketSwap Base·22Pike V1·22Renzo·22MYX Finance·22Geoffrey Woo / AntiHunter (ANTIHUNTER) Memecoin·22Arcadia Finance v1·22Molt EVM·22SurgeBNB·22Warp Protocol·22ApeRocket·22Palmswap·22Corepound·22MSCST (MSC Protocol)·22MemeCore·22WXETA·22Onyx Protocol·22Abracadabra Finance (MIM Stablecoin)·22Local Traders·22Minterest·22Magic Internet Money·22Punk Protocol·22Metawin·23BigONE Exchange·24ALEX Lab·24Giddy·25Vitalik Buterin·25Shuffle (shuffle.com)·26PAAL AI·28SharedStake·28Aperture LM·28Orion Pools·28TBTFW (Beverly Hills Luxury Car Dealer — Crypto Laundering Vector)·28Kinto Bridge·28ALEX Lab·28Truflation·28Token 2049·28GeniusAI·28JRNY Crypto·28Growth DeFi·28KyberSwap Classic·28Moola Market·28OlaXBT·28UPCX·28CrossCurve·28BtcTurk·28Spartans Bet·28Portal·28SBI Crypto·28Level Finance·28Kronos Research·28US Permissionless Dollar·28GriffinAI·28Roe Finance·28BetterBank·28Rubic·28MEXC·28ACT·28Omm·28Crema Finance·28Axiom Trading·28Arcadia V2·28MM Finance Cronos·28Revest Finance·28BitBNS·28Trust Wallet Chrome Extension Hack (December 2025)·28Trinity Wallet·28Seedify·28Singularity Finance·28Thorchain DEX·28AzukiDAO·28Netmind AI·28Platypus Finance·28Slope Wallet·28Cardex·28KuCoin·28Orange Finance·28ANDY·28Abracadabra Money·28Compound V2·28Belt Finance·28edgeX Exchange·28Arthur Hayes (Maelstrom)·30OKX NFT Aggregator·30Axiom Exchange — Employee Insider Trading Scandal·30Revolut Data Breach (Fake Government Request, September 2026)·30Hegic(old contract)·30Akropolis·30Across Protocol Solana Bridge Exploit (July 2026)·30KAITO·30Nexera·32Serenity Shield·32Arena SocialFi·32PiggyBank Protocol·32Axiom·32Geoffrey Woo·32TeleSwap·32Themis Protocol·32Sentiment·32Eleven Finance·32Tropykus RSK·32LeetSwap·32uniBTC·32zkFinance·32Treasure (TreasureDAO)·32GoonFi·32CoinEx·32Impermax V3·32Axiom (Solana DEX)·32BlueBerry Protocol·32Gate.io·32BingX·32Exactly Protocol·32Berally·32$OATH·32LiFi Finance·32Tender Finance·32Midas Capital·32Zircon Gamma·32Stonk·32Revert Lend·33Neutrl·33Strike·34Andy Ayrey·34Bitget Exchange (Shawn Liu)·34Hyperdrive HL·35CoinStats·35Makina Finance·35Kiln·35Aethir·36Cod3x·36Panoptic V1.1·37Tenderize V2·37Astera.fi·38Ansem / $ANSEM ("Black Bull") creator-coin controversy·38MONA (Monavale / DIGITALAX)·38Volo Vault·38Polymarket — June 2026 Supply Chain Attack·38Dogwifhat (WIF)·38CoinDCX·38PRXVT·38Amun·38Kipseli·38BitoPro·38Astrid Finance·38Thunder Terminal·38Offshore Cryptocurrency Exchanges to Avoid·38MustStopMurad·38WazirX·38four.meme·38Sharwa.Finance·38SIR (Synthetics Implemented Right)·38Polycule·38SubQuery Network·38Sovryn·38Yield Protocol·38Wise Lending V2·38StablR·38Port3 Network·38Rain·38Stake.com·38Save·38Wintermute·38Veil Cash·38GMBL.COMPUTER·38LeadBlock's Morpho Blue Market·38JayPegs Automart·38Bonad·38M2·39Juicebox V3·40Nelly·40SafePal·42CoinEx Exchange Closure (September 2026)·42Tectonic·42DGLD·42Cozy V2·42Raga Finance·42Spectral Labs·42YO Protocol·42Ambient Finance·42Allbridge Core·42Fusion by IPOR·42Lava·42Peapods Finance·42Hacken Token·42Bungee·42DIMO·420G Labs·43Silo V2·44SwissBorg·47Maestro·47Silo Finance·47Ledger Live·50PeopleDAO·52SushiSwap·52Bittensor·52Revolut·52Gondi V3·52Frax Finance·52Bitget·52DMM Bitcoin·52Zabu Finance·52Curve LlamaLend·52LCX·54Trust Wallet·55Transak·55Blast·55Trezor·57Sui·57Gate.io·57Crypto.com·58Ethena·58Eigenlayer·58Ankr·58Monero·58Raydium AMM·62Cointelegraph·62Coinbase·62Circle Internet Financial·62Jupiter Exchange·62Porkbun·62Circle·62Phantom Wallet·63Litecoin·64Hypurr NFTs·66Superteam·72Bybit·72Cardano·72ZachXBT·82
- ⌂Bitfinex Hackprotocol
- □John Daghita (aka Lick) — US Marshals Crypto Theftorganization
- □Dean Daghita / CMDSS (Command Services and Support)organization
Timeline(12 events)
2011
CMDSS (Command Services and Support, Inc.) founded in Virginia as a Service-Disabled Veteran-Owned Small Business.
CLEATUS / ZoomInfo contractor recordsJune 2022
DOJ Office of Inspector General publishes audit (Report 22-082) identifying critical deficiencies in USMS seized cryptocurrency management, including spreadsheet reliance and absent policies.
DOJ OIG Audit Report 22-082October 2024
USMS awards CMDSS a contract to manage and dispose of Class 2-4 seized cryptocurrency, reported at approximately $7.8 million covering 2024-2026.
Washington Monthly / CoinDesk15 December 2025
Per the federal indictment, John Daghita allegedly begins transferring seized digital assets from USMS-controlled CMDSS wallets into wallets under his personal control.
Federal indictment, Eastern District of Virginia — reported by Bloomberg / CoinDesk23 January 2026
ZachXBT observes John Daghita (alias 'Lick') screen-sharing a wallet holding tens of millions in government-linked crypto during a Telegram 'band-for-band' exchange, initiating the public investigation.
The Block / CoinDesk26 January 2026
ZachXBT publicly identifies John Daghita as the son of CMDSS president Dean Daghita and reports findings to law enforcement. CoinDesk reports the USMS has opened an investigation.
CoinDesk27 January 2026
Wave Digital Assets formally requests the DOJ Office of Inspector General open a comprehensive investigation into USMS cryptocurrency asset management and the CMDSS contract award.
BusinessWire press releaseFebruary 2026
CMDSS corporate website, X/Twitter account, and LinkedIn page are taken offline following public exposure of the theft allegations.
Yahoo Finance / Bitcoin Magazine4 March 2026
French Gendarmerie, in coordination with the FBI, arrests John Daghita at Villa Sun Reset on the island of Saint Martin. Authorities seize $239,348 in cash, a Rolex GMT Master, and multiple hardware wallets.
CoinDesk / CBS News / The Block26 March 2026
A federal grand jury in Alexandria, Virginia (Eastern District of Virginia) returns a 15-count indictment against John Daghita, charging wire fraud, theft of public money, money laundering, and unlawful monetary transactions.
Bloomberg / Mike Levine reporting on X12 April 2026
Forbes publishes investigation concluding that while John Daghita's case is resolved, the underlying structural failures in the USMS custody system — four prior procurement restarts, ignored OIG warnings — remain unaddressed.
Forbes28 May 2026
French court expected to rule on John Daghita's extradition to the United States. Daghita held at Bastia detention center; had agreed to principle of extradition.
Phemex NewsDecision Log
- hash: 9q33QgnbB9vp5YBczFy3JnQqur381US31XoxhHjbwmbn
- hash: 2Vhq26D8H6CXER6KRYtAHBdjASzoyRyk97nKP9oAzmfA
- hash: EeHyuqK4WDuipBRXLsPDKoPWk4TCFWB6mAopevC2qKx5
- hash: 4b19PBewTHL1d1kxai3atUysjEPsjXSW6Ss8ri59eAKu
This investigation is cryptographically anchored to the Solana blockchain (4 events). 16 of 18 cited source URLs have an Internet Archive snapshot.
model: claude-sonnet-4-6
generated: 8/9/2026, 5:06:32 PM
last updated: 9/11/2026, 5:52:34 AM
5 viewsavoid.net — verified advice for a post-truth world