Skip to main content
Sign in
US Government Crypto Wallet1 decision on this page

Audit log

Every state-changing event for US Government Crypto Wallet: moderation decisions on community submissions, plus corrections and updates from the news pipeline. URL-based decisions carry three independent witnesses — the original source, an Internet Archive snapshot taken at submission time, and a Solana memo signed by our publicly-disclosed publisher key.

  1. #1publishby system:backfill
    2026-05-20 04:09:27Z
    Score: ?? (no score change)
    anchoranchored
    chain
    mainnet-betaslot 420,910,796
    sig
    5FwV5R1Cc6Av…kjqgQVqjexplorer ↗
    hash
    HcmTKrAWMY3Q…cJjKuUiFsha256 → base58
    verifying row…full verify ↗
    canonical bytes (7934 B) ▸
    {"actor":"system:backfill","investigation_id":"5d0478e5-67d5-4901-9672-cb8846e624ca","kind":"publish","page_slug":"us-government-crypto-wallet","published_at":"2026-05-20T04:09:27.698Z","sequence_num":1,"snapshot":{"content_type":"investigation","entity_name":"US Government Crypto Wallet","sections":[{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.justice.gov/archives/opa/pr/bitfinex-hacker-sentenced-money-laundering-conspiracy-involving-billions-stolen"},{"credibility":3,"name":"","type":"other","url":"https://en.wikipedia.org/wiki/2016_Bitfinex_hack"},{"credibility":3,"name":"","type":"other","url":"https://oig.justice.gov/news/doj-oig-releases-report-us-marshals-services-management-seized-cryptocurrency"},{"credibility":3,"name":"","type":"other","url":"https://fortune.com/crypto/2025/01/09/federal-government-allowed-sell-bitcoin-silk-road-courts/"},{"credibility":3,"name":"","type":"other","url":"https://www.cnbc.com/2020/11/05/1-billion-worth-of-bitcoin-linked-to-the-silk-road-seized-by-the-us.html"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.theblock.co/post/279733/us-government-initiates-around-922-million-in-bitcoin-transfers-from-seized-bitfinex-hack-funds"},{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/300133/us-court-greenlights-sale-of-6-5b-in-seized-silk-road-bitcoin"},{"credibility":3,"name":"","type":"other","url":"https://cryptoslate.com/us-government-moves-30175-bitcoin-confiscated-from-silk-road-to-coinbase/"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/policy/2025/02/20/u-s-marshals-service-managing-seized-assets-can-t-say-how-much-crypto-it-holds"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://decrypt.co/288151/us-government-crypto-wallet-drained-20-million"},{"credibility":3,"name":"","type":"other","url":"https://cointelegraph.com/news/us-government-crypto-hacked-arkham-intelligence"},{"credibility":3,"name":"","type":"other","url":"https://www.theblock.co/post/386945/individual-behind-40-million-government-wallet-theft-is-son-of-seized-crypto-contractor-executive-zachxbt"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/business/2026/01/26/u-s-marshals-investigate-claims-that-son-of-government-contractor-stole-usd40-million-of-seized-crypto"},{"credibility":3,"name":"","type":"other","url":"https://www.trmlabs.com/resources/blog/zachxbt-uncovers-crypto-theft-network-linked-to-us-government-seizure-funds"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://www.trmlabs.com/resources/blog/john-daghita-aka-john-lick-arrested-in-alleged-cryptocurrency-theft-tied-to-us-marshals-service"},{"credibility":3,"name":"","type":"other","url":"https://www.bleepingcomputer.com/news/security/fbi-arrests-suspect-linked-to-46m-crypto-theft-from-us-marshals/"},{"credibility":3,"name":"","type":"other","url":"https://www.ccn.com/news/crypto/us-bitcoin-insider-theft-zachxbt/"},{"credibility":3,"name":"","type":"other","url":"https://washingtonmonthly.com/2026/02/19/cryptocurrency-government-custody/"},{"credibility":3,"name":"","type":"other","url":"https://oig.justice.gov/sites/default/files/reports/22-082.pdf"}]},{"content":"","heading":"","severity":"medium","sources":[{"credibility":3,"name":"","type":"other","url":"https://bitcoinmagazine.com/news/us-investigating-40-million-crypto-theft"},{"credibility":3,"name":"","type":"other","url":"https://www.coindesk.com/business/2026/03/05/son-of-u-s-government-contractor-accused-of-stealing-millions-in-seized-crypto-arrested-in-france"},{"credibility":3,"name":"","type":"other","url":"https://www.cbsnews.com/news/federal-contractor-who-allegedly-stole-46-million-in-crypto-arrested-in-caribbean-fbi-says/"},{"credibility":3,"name":"","type":"other","url":"https://www.bloomberg.com/news/articles/2026-03-05/fbi-arrests-contractor-in-alleged-crypto-theft-held-by-marshals"},{"credibility":3,"name":"","type":"other","url":"https://www.panewslab.com/en/articles/019cbe99-295b-7256-9788-8fb5ae08167e"}]}],"sources_used":[],"summary":"The US government holds one of the largest concentrations of seized cryptocurrency in the world, accumulated through major law enforcement actions including the 2016 Bitfinex hack and the Silk Road darknet marketplace. In October 2024, a government-controlled wallet linked to Bitfinex seizure funds was drained of approximately $20 million in what was subsequently attributed to alleged insider theft by John Daghita, son of a US Marshals Service contractor, who was arrested in Saint Martin in March 2026 after a blockchain investigation by ZachXBT exposed the scheme.","timeline":[{"date":"2016-08-02","event":"Bitfinex exchange hacked; 119,754 Bitcoin stolen by Ilya Lichtenstein","source":""},{"date":"2013-10-02","event":"FBI shuts down Silk Road; approximately 170,000 Bitcoin seized from Ross Ulbricht and platform servers","source":""},{"date":"2020-11-03","event":"US government seizes 69,370 Bitcoin linked to Silk Road 'Individual X' hacker, then worth approximately $1 billion","source":""},{"date":"2022-02-08","event":"DOJ recovers approximately 95,000 Bitcoin from Bitfinex hack by decrypting Lichtenstein's wallet key file; Lichtenstein and Heather Morgan arrested","source":""},{"date":"2022-06-14","event":"DOJ OIG releases audit finding the USMS relied on inaccurate spreadsheets and lacked adequate policies for seized crypto management","source":""},{"date":"2023-08-03","event":"Lichtenstein and Morgan plead guilty to money laundering conspiracy","source":""},{"date":"2024-02-28","event":"US government transfers approximately $922 million in Bitcoin from Bitfinex-seized wallets; Arkham identifies wallets on-chain","source":""},{"date":"2024-10-01","event":"CMDSS, run by Dean Daghita, awarded USMS contract to manage and dispose of seized cryptocurrency","source":""},{"date":"2024-10-24","event":"Approximately $20 million drained from US government Ethereum wallet holding Bitfinex-seized assets; Arkham Intelligence reports incident; most funds allegedly returned after FBI outreach, roughly $700,000 permanently lost","source":""},{"date":"2024-11-14","event":"Ilya Lichtenstein sentenced to five years; Heather Morgan sentenced to 18 months","source":""},{"date":"2025-01-09","event":"Federal court authorizes US government to sell 69,370 Silk Road Bitcoin, valued at approximately $6.5 billion","source":""},{"date":"2025-01-23","event":"ZachXBT observes a recorded Telegram dispute in which handle 'Lick' demonstrates live access to wallets containing large sums linked to government seizures","source":""},{"date":"2026-01-25","event":"ZachXBT publishes investigation publicly identifying 'Lick' as the individual behind alleged $40+ million theft from USMS-linked wallets; traces funds to CMDSS contractor connection","source":""},{"date":"2026-01-26","event":"US Marshals Service confirms it is investigating allegations; CoinDesk and The Block report USMS inquiry","source":""},{"date":"2026-02-19","event":"Washington Monthly publishes investigation into USMS's reliance on spreadsheets to manage approximately $22 billion in seized crypto, citing systemic custody failures","source":""},{"date":"2026-03-05","event":"John Daghita arrested on the island of Saint Martin by French Gendarmerie elite tactical unit in coordination with FBI Washington Field Office; hardware wallets, USB drives, and US currency seized","source":""},{"date":"2026-03-06","event":"FBI Director Kash Patel announces arrest; Daghita accused of stealing more than $46 million in cryptocurrency from the USMS; ZachXBT states the arrest resulted directly from his blockchain investigation","source":""}]},"v":1}
    Verify offline (run on your own machine)
    python -m src.verify_decision 5939dab8-dca2-4982-98ea-31883bce05df
How verification works. The “Row integrity” check above is computed in your browser — your machine recomputes the SHA-256 of the canonical bytes and compares against the stored hash. No avoid.net server can fake that check. The “full verify” link goes one level deeper: your browser fetches the on-chain transaction from a Solana RPC node and confirms the same hash is in the memo. If you don’t want to trust either avoid.net or the public RPC, run the CLI verifier on your own machine — python -m src.verify_decision <event_id>.