John Daghita (aka Lick) — US Marshals Crypto Theft
Last changed 2026-10-27 · Re-researched — Re-researched in full by the investigator agent at a reader's request; the text was rewritten from new research. Version history →
Why this score
| Every page starts at | 65 |
| The subject's own conduct | -105 |
| Concerns that are not fraud | -6 |
| Problems around it, caused by others | -4 |
| Long-running | +4 |
| Sum | -46 |
- No established finding that it defrauded anyone, so it stays out of the red band (26 or above).
Score: 26/100 (kept between 0 and 100)
How scoring works →Summary
John Daghita, who used the online alias "Lick," was arrested by French gendarmerie and the FBI on Saint Martin in March 2026 over allegations he stole tens of millions of dollars in cryptocurrency from U.S. government wallets tied to a U.S. Marshals Service (USMS) contract held by his father's firm, Command Services & Support (CMDSS). The allegations, first raised by blockchain investigator ZachXBT, are well corroborated by multiple news outlets and the FBI's own public statements, and a French appeals court authorized his extradition to the United States in May 2026; however, no DOJ press release, indictment filing, or court docket confirming specific federal charges or a count total could be located, and several granular details reported elsewhere (exact seized-cash figures, named luxury items, specific field-office attributions beyond one source) remain unverified.
Connected Entities
8 entities · 60 linked investigations- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Ethereum(65%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Solana(65%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→ZachXBT(70%)
- Dean Daghita / CMDSS (Command Services and Support)→mentioned with→ZachXBT(70%)
- ZachXBT→mentioned with→Ethereum(70%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Bitfinex / Tether(65%)
- Bitfinex / Tether→mentioned with→Bitfinex Hack(80%)
- Dean Daghita / CMDSS (Command Services and Support)→mentioned with→John Daghita (aka Lick) — US Marshals Crypto Theft(80%)
- Dean Daghita / CMDSS (Command Services and Support)→mentioned with→Bitfinex Hack(80%)
- John Daghita (aka Lick) — US Marshals Crypto Theft→mentioned with→Dean Daghita / CMDSS (Command Services and Support)(80%)
- + 5 more
Timeline(6 events)
October 2024
CMDSS, led by Dean Daghita, reported to have been awarded a U.S. Marshals Service contract (reported at roughly $4 million) to assist with custody/disposition of seized cryptocurrency; around the same month, roughly $20–25 million was allegedly taken from a US government-controlled wallet tied to Bitfinex-hack seizure funds, with most later returned.
TRM Labs / Merkle ScienceJanuary 2026
Blockchain investigator ZachXBT published findings tracing a Telegram "band-for-band" wealth-flexing dispute to wallets allegedly linked to tens of millions of dollars in stolen funds, and separately identified the suspect as "Lick," alleged to be John Daghita.
Web3 Is Going GreatJanuary 2026
A memecoin named "John Daghita (LICK)" launched on Pump.fun and crashed roughly 97% within a day; Bubblemaps flagged the deployer's concentrated token holdings and tied the launch to the theft allegations.
CointelegraphFebruary 2026
Fortune reported that the US Marshals Service confirmed an active investigation into the alleged theft and detailed prior GAO scrutiny of the CMDSS contract award.
Fortune5 March 2026
FBI Director Kash Patel announced that John Daghita had been arrested on Saint Martin in a joint FBI/French gendarmerie operation, accused of stealing more than $46 million in cryptocurrency from the US Marshals Service.
The Block28 May 2026
The investigation chamber of the Cour d'Appel de Basse-Terre in Guadeloupe authorized Daghita's extradition to the United States.
Agence France-Presse via Ground NewsDecision Log
- slot 457783088 · hash FtYk2BmoYukLV2FKMQZiQmJ3yVCMhfYUt2fwQW7NGfTB
- slot 455361246 · hash DaKEJLZekZ1Dk872iGLMasoRjU5D5KzQrgmT7jUtXkB1
- slot 443521826 · hash 9taXDmMJ4UKKEipx78XmZamLyMFxVw6YV9Vae5hM8a5W
- slot 443521728 · hash 7qnu75RyhwUBaedJefjX4FEDF4y5WC4diTWLx2DpZgCp
- slot 443503289 · hash 4FqVogcExXFKcRfEMfDTLiMsYVKn4LvpoBSRU5ArVi6g
This investigation is cryptographically anchored to the Solana blockchain (5 decisions). 0 of 12 cited source URLs have an Internet Archive snapshot.
model: claude-code-investigator
generated: 8/1/2026, 5:04:59 PM
last updated: 10/27/2026, 9:01:30 PM
5 viewsavoid.net — verified advice for a post-truth world