Audit log

Every state-changing event for Dean Daghita / CMDSS (Command Services and Support): moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions are designed to carry three independent witnesses — the original source, an Internet Archive snapshot, and a Solana memo signed by our publicly-disclosed publisher key. Archive coverage is still being backfilled, so each decision below reports its own snapshot status rather than assuming one exists.

1. #1publishby system:backfill

   2026-08-09 17:06:42Z
   Score: ? → ? (no score change)
   anchorpending

   chain

   ●—

   hash

   4b19PBewTHL1…ri59eAKucopysha256 → base58

   verifying row…

   canonical bytes (23161 B) ▸

   {"actor":"system:backfill","investigation_id":"0f0d20de-6cb0-4351-ac30-7d3384dabfb9","kind":"publish","page_slug":"dean-daghita-cmdss-command-services-and-support","published_at":"2026-08-09T17:06:42.308Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"Dean Daghita / CMDSS (Command Services and Support)","sections":[{"content":"Command Services and Support, Inc. (CMDSS) is a technology services firm incorporated in 2011 and headquartered at 5501 Merchant View Square, Suite 133, Haymarket, Virginia. The company holds a Service-Disabled Veteran-Owned Small Business (SDVOSB) designation and is registered in SAM.gov under UEI H2UKCTX4NKJ3 and CAGE code 69R10. CMDSS describes itself as a provider of mission-critical services to the Department of Defense and Department of Justice, focusing on program and project management, IT infrastructure, systems administration, and ITIL-framework implementations. As of early 2026, the company had received approximately $4.39 million across four federal prime contracts, with the Department of Justice listed as the primary awarding agency.","heading":"Company Background","severity":"medium","sources":[{"credibility":2,"name":"COMMAND SERVICES & SUPPORT, INC. | CLEATUS government contractor profile","type":"other","url":"https://www.cleat.ai/government/contractors/command-services-and-support-inc-v0kb"},{"credibility":2,"name":"Command Services & Support, Inc. | HigherGov","type":"other","url":"https://www.highergov.com/awardee/command-services-support-inc-10096794/"}]},{"content":"In October 2024, the U.S. Marshals Service awarded CMDSS a contract to assist with the custody and disposition of so-called 'Class 2-4' digital assets — categories of seized cryptocurrency not supported by major centralized exchanges and requiring bespoke handling. The total value of CMDSS's USMS-related contracts has been reported at approximately $7.8 million covering the period from 2024 to 2026. Critics, including competing firm Wave Digital Assets, alleged that CMDSS and its proposed subcontractors lacked the regulatory licenses, fiduciary duties, and supervisory regimes typically required for digital asset custody. Wave filed a protest at the agency level, followed by a Government Accountability Office protest, and was pursuing relief before the U.S. Court of Federal Claims as of early 2026. The 2022 DOJ Office of Inspector General audit of USMS crypto management had previously found that the agency lacked adequate documented policies and procedures to build performance requirements for a cryptocurrency services contract, a deficiency that went unaddressed before CMDSS was awarded the contract.","heading":"US Marshals Service Contract Award","severity":"high","sources":[{"credibility":2,"name":"Wave Digital Assets Requests Formal DOJ OIG Investigation into USMS Cryptocurrency Asset Management","type":"other","url":"https://www.businesswire.com/news/home/20260127294217/en/Wave-Digital-Assets-Requests-Formal-DOJ-Office-of-Inspector-General-Investigation-into-U.S.-Marshals-Service-Cryptocurrency-Asset-Management"},{"credibility":1,"name":"Audit of the United States Marshals Service's Management of Seized Cryptocurrency — DOJ OIG Report 22-082","type":"regulatory","url":"https://oig.justice.gov/sites/default/files/reports/22-082.pdf"},{"credibility":2,"name":"The $22 Billion Spreadsheet Problem | Washington Monthly","type":"news_article","url":"https://washingtonmonthly.com/2026/02/19/cryptocurrency-government-custody/"}]},{"content":"John Daghita, the 21-year-old son of CMDSS president Dean Daghita, was employed at CMDSS as a 'Cryptocurrency Subject Matter Expert.' According to a 15-count federal indictment returned by a grand jury in the Eastern District of Virginia on approximately March 26, 2026, John Daghita allegedly used his insider access to transfer more than $46 million in seized digital assets from USMS-controlled wallets into wallets solely under his control between December 15, 2025, and January 23, 2026. Approximately $24.9 million of the traced funds originated from a government wallet holding cryptocurrency seized in connection with the 2016 Bitfinex hack. The indictment charges include wire fraud, theft of government money, money laundering, and unlawful monetary transactions. Notably, in one documented incident, approximately 20 minutes after the USMS requested the return of roughly $2 million in virtual currency, Daghita allegedly transferred those assets to a non-USMS address instead. After the theft was publicly identified, Daghita allegedly moved funds through mixers, cross-blockchain transfers, and multiple consolidation addresses; FBI investigators reportedly de-mixed those transactions to continue tracing the assets.","heading":"Alleged $46 Million Insider Theft — John Daghita","severity":"critical","sources":[{"credibility":1,"name":"FBI Arrests U.S. Contractor's Son In $46 Million Crypto Theft | Forbes","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/03/05/fbi-arrests-us-contractors-son-in-46-million-crypto-theft/"},{"credibility":2,"name":"Son of contractor managing seized crypto for U.S. Marshals arrested — CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2026/03/05/son-of-u-s-government-contractor-accused-of-stealing-millions-in-seized-crypto-arrested-in-france"},{"credibility":2,"name":"John Daghita aka 'John/Lick' Arrested — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/john-daghita-aka-john-lick-arrested-in-alleged-cryptocurrency-theft-tied-to-us-marshals-service"},{"credibility":1,"name":"FBI Nabs Contractor for Allegedly Stealing Crypto From Marshals | Bloomberg","type":"news_article","url":"https://www.bloomberg.com/news/articles/2026-03-05/fbi-arrests-contractor-in-alleged-crypto-theft-held-by-marshals"}]},{"content":"In late January 2026, independent blockchain investigator ZachXBT publicly exposed the alleged theft after observing a Telegram 'band-for-band' exchange — a trend in which participants publicly display crypto holdings — on or around January 23, 2026. A participant known as 'Lick' screen-shared an Exodus wallet displaying addresses holding tens of millions of dollars in digital assets later identified as originating from government seizure wallets. ZachXBT traced the wallet addresses, identified John Daghita, and reported his findings to law enforcement. ZachXBT also identified that the individual subsequently sent 0.6767 ETH to ZachXBT's public address, which was forwarded to a government seizure address, and later launched a 'dust attack' against ZachXBT using a small amount of the allegedly stolen funds. ZachXBT publicly credited his investigation as the direct catalyst for John Daghita's arrest.","heading":"ZachXBT Investigation and Public Exposure","severity":"high","sources":[{"credibility":3,"name":"ZachXBT on X — arrest statement","type":"social_media","url":"https://x.com/zachxbt/status/2029577374057296175?lang=en"},{"credibility":2,"name":"Individual behind $40 million government wallet theft is son of seized-crypto contractor executive: ZachXBT | The Block","type":"news_article","url":"https://www.theblock.co/post/386945/individual-behind-40-million-government-wallet-theft-is-son-of-seized-crypto-contractor-executive-zachxbt"},{"credibility":2,"name":"U.S. Marshals investigate claim of $40 million crypto theft by son of federal crypto custodian | CoinDesk","type":"news_article","url":"https://www.coindesk.com/business/2026/01/26/u-s-marshals-investigate-claims-that-son-of-government-contractor-stole-usd40-million-of-seized-crypto"}]},{"content":"On March 4, 2026, French Gendarmerie officers operating in coordination with the FBI arrested John Daghita at Villa Sun Reset on the island of Saint Martin (a French collectivity). Authorities recovered $239,348 in cash, a Rolex GMT Master, and multiple hardware wallets alleged to contain stolen government cryptocurrency. FBI Director Kash Patel publicly posted images of the arrest. John Daghita was subsequently held at the Bastia detention center pending extradition proceedings. A French court was expected to review the extradition request in May 2026. As of available reporting, John Daghita had agreed to the principle of extradition but had not yet been transferred to U.S. custody or entered a plea to the federal charges.","heading":"Arrest and Extradition Proceedings","severity":"critical","sources":[{"credibility":2,"name":"Suspect in alleged $46 million US Marshals crypto theft arrested in Saint Martin, FBI says | The Block","type":"news_article","url":"https://www.theblock.co/post/392431/suspect-alleged-46-million-us-marshals-crypto-theft-arrested-saint-martin-fbi"},{"credibility":2,"name":"US government contractor accused of stealing $46M arrested on small island, FBI announces | Fox News","type":"news_article","url":"https://www.foxnews.com/us/us-government-contractor-accused-stealing-46m-arrested-small-island-fbi-announces"},{"credibility":1,"name":"Federal contractor who allegedly stole $46 million in crypto arrested in Caribbean, FBI says | CBS News","type":"news_article","url":"https://www.cbsnews.com/news/federal-contractor-who-allegedly-stole-46-million-in-crypto-arrested-in-caribbean-fbi-says/"},{"credibility":2,"name":"French Court Reviews Extradition of American in $46M Crypto | Phemex News","type":"news_article","url":"https://phemex.com/news/article/french-court-reviews-extradition-of-american-accused-of-46m-crypto-theft-84748"}]},{"content":"Dean Daghita, president and CEO of CMDSS, has not been charged or arrested in connection with the alleged theft as of August 2026. No public reporting has established direct complicity or knowledge on his part. However, following public exposure of the allegations in late January 2026, CMDSS's corporate website (cmdss.com), its X/Twitter account, and its LinkedIn page were taken offline. The disappearance of CMDSS's web presence drew additional scrutiny from journalists and the broader crypto community. Dean Daghita has not made any documented public statements in response to the allegations against his son or the company.","heading":"Dean Daghita — Status and CMDSS Response","severity":"high","sources":[{"credibility":2,"name":"ZachXBT Alleges Son of US Government Crypto Custodian CEO Behind Wallet Theft | Yahoo Finance","type":"news_article","url":"https://www.yahoo.com/news/articles/zachxbt-alleges-son-us-government-073859018.html"},{"credibility":2,"name":"U.S. Contractor Arrested In $46M Theft Of Government Crypto | Bitcoin Magazine","type":"news_article","url":"https://bitcoinmagazine.com/news/u-s-crypto-contractor-arrested-theft"}]},{"content":"The CMDSS case exposed compounding failures in the U.S. government's management of seized cryptocurrency. A 2022 DOJ Office of Inspector General audit had flagged USMS reliance on supplemental spreadsheets that 'could be edited or deleted without a record,' policies related to 'asset storage, quantification, valuation, and disposal' that were 'inadequate or absent,' and a warning that USMS 'lacks an adequate foundation for building performance requirements for a cryptocurrency services contract.' These findings went unresolved before the CMDSS contract was awarded in October 2024. Four procurement restarts preceded the final contract award. The IRS Criminal Investigation division had reportedly declined to route assets through the system managed by CMDSS. Wave Digital Assets, a competing firm that lost the contract bid, filed formal protests at the agency level, at the Government Accountability Office, and in the U.S. Court of Federal Claims, alleging that CMDSS lacked comparable regulatory licenses, fiduciary duties, and supervisory oversight regimes. Wave also requested a formal DOJ OIG investigation into USMS cryptocurrency asset management in January 2026. Critics have noted that billions of dollars in seized government digital assets remain at risk due to unresolved structural custody problems even after John Daghita's arrest.","heading":"Systemic Oversight Failures and Broader Impact","severity":"critical","sources":[{"credibility":1,"name":"A $46 Million Crypto Theft Is Solved. The System That Allowed It Isn't | Forbes","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/04/12/a-46-million-crypto-theft-is-solved-the-system-that-allowed-it-isnt/"},{"credibility":1,"name":"Audit of the United States Marshals Service's Management of Seized Cryptocurrency — DOJ OIG Report 22-082","type":"regulatory","url":"https://oig.justice.gov/sites/default/files/reports/22-082.pdf"},{"credibility":2,"name":"Wave Digital Assets DOJ OIG investigation request | BusinessWire","type":"other","url":"https://www.businesswire.com/news/home/20260127294217/en/Wave-Digital-Assets-Requests-Formal-DOJ-Office-of-Inspector-General-Investigation-into-U.S.-Marshals-Service-Cryptocurrency-Asset-Management"},{"credibility":2,"name":"The $22 Billion Spreadsheet Problem | Washington Monthly","type":"news_article","url":"https://washingtonmonthly.com/2026/02/19/cryptocurrency-government-custody/"}]}],"sources_used":[{"credibility":1,"name":"FBI Arrests U.S. Contractor's Son In $46 Million Crypto Theft | Forbes","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/03/05/fbi-arrests-us-contractors-son-in-46-million-crypto-theft/"},{"credibility":1,"name":"A $46 Million Crypto Theft Is Solved. The System That Allowed It Isn't | Forbes","type":"news_article","url":"https://www.forbes.com/sites/digital-assets/2026/04/12/a-46-million-crypto-theft-is-solved-the-system-that-allowed-it-isnt/"},{"credibility":1,"name":"FBI Nabs Contractor for Allegedly Stealing Crypto From Marshals | Bloomberg","type":"news_article","url":"https://www.bloomberg.com/news/articles/2026-03-05/fbi-arrests-contractor-in-alleged-crypto-theft-held-by-marshals"},{"credibility":1,"name":"Federal contractor who allegedly stole $46 million in crypto arrested in Caribbean | CBS News","type":"news_article","url":"https://www.cbsnews.com/news/federal-contractor-who-allegedly-stole-46-million-in-crypto-arrested-in-caribbean-fbi-says/"},{"credibility":1,"name":"Audit of the United States Marshals Service's Management of Seized Cryptocurrency — DOJ OIG Report 22-082","type":"regulatory","url":"https://oig.justice.gov/sites/default/files/reports/22-082.pdf"},{"credibility":2,"name":"Son of contractor managing seized crypto for U.S. Marshals arrested | CoinDesk (March 2026)","type":"news_article","url":"https://www.coindesk.com/business/2026/03/05/son-of-u-s-government-contractor-accused-of-stealing-millions-in-seized-crypto-arrested-in-france"},{"credibility":2,"name":"U.S. Marshals investigate claim of $40 million crypto theft | CoinDesk (January 2026)","type":"news_article","url":"https://www.coindesk.com/business/2026/01/26/u-s-marshals-investigate-claims-that-son-of-government-contractor-stole-usd40-million-of-seized-crypto"},{"credibility":2,"name":"Individual behind $40 million government wallet theft is son of seized-crypto contractor executive | The Block","type":"news_article","url":"https://www.theblock.co/post/386945/individual-behind-40-million-government-wallet-theft-is-son-of-seized-crypto-contractor-executive-zachxbt"},{"credibility":2,"name":"Suspect in $46 million US Marshals crypto theft arrested in Saint Martin | The Block","type":"news_article","url":"https://www.theblock.co/post/392431/suspect-alleged-46-million-us-marshals-crypto-theft-arrested-saint-martin-fbi"},{"credibility":2,"name":"John Daghita aka 'John/Lick' Arrested — TRM Labs","type":"research","url":"https://www.trmlabs.com/resources/blog/john-daghita-aka-john-lick-arrested-in-alleged-cryptocurrency-theft-tied-to-us-marshals-service"},{"credibility":2,"name":"Wave Digital Assets Requests Formal DOJ OIG Investigation into USMS Cryptocurrency Asset Management | BusinessWire","type":"other","url":"https://www.businesswire.com/news/home/20260127294217/en/Wave-Digital-Assets-Requests-Formal-DOJ-Office-of-Inspector-General-Investigation-into-U.S.-Marshals-Service-Cryptocurrency-Asset-Management"},{"credibility":2,"name":"The $22 Billion Spreadsheet Problem | Washington Monthly","type":"news_article","url":"https://washingtonmonthly.com/2026/02/19/cryptocurrency-government-custody/"},{"credibility":2,"name":"US contractor's son arrested over alleged $46M crypto theft | The Register","type":"news_article","url":"https://www.theregister.com/2026/03/06/contractor_son_crypto_arrest/"},{"credibility":2,"name":"FBI Arrests Virginia Man Linked to $46M US Marshals Crypto Wallet Theft | Bitcoin News","type":"news_article","url":"https://news.bitcoin.com/fbi-arrests-virginia-man-linked-to-46m-us-marshals-crypto-wallet-theft/"},{"credibility":1,"name":"U.S. Marshals Service under scrutiny after insider allegedly stole $25 million from federal crypto wallets | Fortune","type":"news_article","url":"https://fortune.com/2026/02/06/us-marshals-service-scrutiny-insider-allegedly-stole-25-million-federal-crypto-wallets/"},{"credibility":3,"name":"ZachXBT on X — arrest statement","type":"social_media","url":"https://x.com/zachxbt/status/2029577374057296175?lang=en"},{"credibility":2,"name":"French Court Reviews Extradition of American in $46M Crypto | Phemex News","type":"news_article","url":"https://phemex.com/news/article/french-court-reviews-extradition-of-american-accused-of-46m-crypto-theft-84748"},{"credibility":2,"name":"COMMAND SERVICES & SUPPORT, INC. | CLEATUS government contractor profile","type":"other","url":"https://www.cleat.ai/government/contractors/command-services-and-support-inc-v0kb"}],"summary":"Command Services and Support, Inc. (CMDSS) is a Haymarket, Virginia-based Service-Disabled Veteran-Owned Small Business led by president and CEO Dean Daghita that received a U.S. Marshals Service contract in October 2024 to manage and dispose of Class 2-4 seized cryptocurrency. In January 2026, blockchain investigator ZachXBT publicly alleged that Daghita's son, John Daghita (alias 'Lick'), had stolen over $46 million in digital assets from government-controlled USMS wallets by abusing insider access obtained through his father's company. John Daghita was arrested in Saint Martin on March 4, 2026, and was subsequently indicted on 15 federal counts; Dean Daghita himself had not been charged as of August 2026, though CMDSS's online presence was taken offline following the revelations and the company faces significant scrutiny over contract award process and oversight failures.","timeline":[{"date":"2011-01-01","event":"CMDSS (Command Services and Support, Inc.) founded in Virginia as a Service-Disabled Veteran-Owned Small Business.","source":"CLEATUS / ZoomInfo contractor records","source_url":"https://www.cleat.ai/government/contractors/command-services-and-support-inc-v0kb"},{"date":"2022-06-01","event":"DOJ Office of Inspector General publishes audit (Report 22-082) identifying critical deficiencies in USMS seized cryptocurrency management, including spreadsheet reliance and absent policies.","source":"DOJ OIG Audit Report 22-082","source_url":"https://oig.justice.gov/sites/default/files/reports/22-082.pdf"},{"date":"2024-10-01","event":"USMS awards CMDSS a contract to manage and dispose of Class 2-4 seized cryptocurrency, reported at approximately $7.8 million covering 2024-2026.","source":"Washington Monthly / CoinDesk","source_url":"https://washingtonmonthly.com/2026/02/19/cryptocurrency-government-custody/"},{"date":"2025-12-15","event":"Per the federal indictment, John Daghita allegedly begins transferring seized digital assets from USMS-controlled CMDSS wallets into wallets under his personal control.","source":"Federal indictment, Eastern District of Virginia — reported by Bloomberg / CoinDesk","source_url":"https://www.bloomberg.com/news/articles/2026-03-05/fbi-arrests-contractor-in-alleged-crypto-theft-held-by-marshals"},{"date":"2026-01-23","event":"ZachXBT observes John Daghita (alias 'Lick') screen-sharing a wallet holding tens of millions in government-linked crypto during a Telegram 'band-for-band' exchange, initiating the public investigation.","source":"The Block / CoinDesk","source_url":"https://www.theblock.co/post/386945/individual-behind-40-million-government-wallet-theft-is-son-of-seized-crypto-contractor-executive-zachxbt"},{"date":"2026-01-26","event":"ZachXBT publicly identifies John Daghita as the son of CMDSS president Dean Daghita and reports findings to law enforcement. CoinDesk reports the USMS has opened an investigation.","source":"CoinDesk","source_url":"https://www.coindesk.com/business/2026/01/26/u-s-marshals-investigate-claims-that-son-of-government-contractor-stole-usd40-million-of-seized-crypto"},{"date":"2026-01-27","event":"Wave Digital Assets formally requests the DOJ Office of Inspector General open a comprehensive investigation into USMS cryptocurrency asset management and the CMDSS contract award.","source":"BusinessWire press release","source_url":"https://www.businesswire.com/news/home/20260127294217/en/Wave-Digital-Assets-Requests-Formal-DOJ-Office-of-Inspector-General-Investigation-into-U.S.-Marshals-Service-Cryptocurrency-Asset-Management"},{"date":"2026-02-01","event":"CMDSS corporate website, X/Twitter account, and LinkedIn page are taken offline following public exposure of the theft allegations.","source":"Yahoo Finance / Bitcoin Magazine","source_url":"https://www.yahoo.com/news/articles/zachxbt-alleges-son-us-government-073859018.html"},{"date":"2026-03-04","event":"French Gendarmerie, in coordination with the FBI, arrests John Daghita at Villa Sun Reset on the island of Saint Martin. Authorities seize $239,348 in cash, a Rolex GMT Master, and multiple hardware wallets.","source":"CoinDesk / CBS News / The Block","source_url":"https://www.coindesk.com/business/2026/03/05/son-of-u-s-government-contractor-accused-of-stealing-millions-in-seized-crypto-arrested-in-france"},{"date":"2026-03-26","event":"A federal grand jury in Alexandria, Virginia (Eastern District of Virginia) returns a 15-count indictment against John Daghita, charging wire fraud, theft of public money, money laundering, and unlawful monetary transactions.","source":"Bloomberg / Mike Levine reporting on X","source_url":"https://x.com/MLevineReports/status/2037614378577433076"},{"date":"2026-04-12","event":"Forbes publishes investigation concluding that while John Daghita's case is resolved, the underlying structural failures in the USMS custody system — four prior procurement restarts, ignored OIG warnings — remain unaddressed.","source":"Forbes","source_url":"https://www.forbes.com/sites/digital-assets/2026/04/12/a-46-million-crypto-theft-is-solved-the-system-that-allowed-it-isnt/"},{"date":"2026-05-28","event":"French court expected to rule on John Daghita's extradition to the United States. Daghita held at Bastia detention center; had agreed to principle of extradition.","source":"Phemex News","source_url":"https://phemex.com/news/article/french-court-reviews-extradition-of-american-accused-of-46m-crypto-theft-84748"}]},"v":1}

   Verify offline (run on your own machine)

   python -m src.verify_decision a1e91673-923a-469f-ae9d-b9a5e540023acopy