Contractor’s Son Allegedly Behind Over $90M Drained From U.S. Seizure Crypto Wallets

Blockchain investigator ZachXBT linked a threat actor known as “John” or “Lick” to more than $90 million in suspected cryptocurrency thefts from U.S. government seizure addresses, an allegation that has prompted questions about custody procedures at the U.S. Marshals Service ^[1][3].

Reporting identifies the alleged actor as John Daghita (aka “Lick”) and says his father is reportedly the CEO of CMDSS, a company with an active government IT contract that has worked with the U.S. Marshals Service; multiple outlets say CMDSS’s website and social accounts were taken offline after the claims surfaced ^[2][4][1].

Published accounts show differing totals cited for the drained funds—some reports emphasize figures above $90 million while others referenced earlier estimates around $40 million—and media coverage is grounded primarily in onchain analysis by independent sleuths ^[3][1].

The episode remains a developing story driven by onchain investigation and media reporting; follow-up reporting and official statements will be needed to confirm the allegations ^[1][3].