Blockchain investigator ZachXBT has claimed that the person responsible for stealing millions of dollars in cryptocurrency from wallets controlled by the US government was the son of the CEO of a company responsible for protecting confiscated digital assets.
Most important key points:
- ZachXBT claims the theft of millions of dollars in cryptocurrency from U.S. government wallets is linked to the son of the CEO of a company hired by the federal government to hold cryptocurrencies.
- The funds were allocated to wallets linked to assets seized in the 2016 Bitfinex hack.
- These allegations have yet to be proven in court and no charges have been filed as of press time.
In a series of articles detailing his findings, ZachXBT claimed that a person known online as “Lick,” whose real name he identified as John D’Agetta, transferred tens of millions of dollars in cryptocurrency from wallets linked to the U.S. government.
He also claimed that D’Agetta was the son of Dean D’Agetta, president and CEO of Command and Support Services (CMDSS), a company hired by the US Marshals Service to manage some of the seized cryptocurrencies.
CMDSS won a contract from the US Marshals Office to handle non-traditional confiscated cryptocurrencies.
Public records show that CMDSS, based in Haymarket, Virginia, was awarded a contract in October 2024 to assist the Marshals Service in the custody and disposition of so-called “class 2-4” digital assets.
These include tokens that are not supported by major centralized trading platforms and often require special treatment.
These allegations have not been tested in court and no criminal charges have been announced. The Department of Mental and Behavioral Health Services (CMDSS) did not respond to requests for comment at the time of publication.
ZachXBT’s allegations expand on an investigation he published on January 23, which linked the same online personality to more than $90 million in alleged illicit activity in the cryptocurrency space.
That investigation found the funds belonged to a U.S. government wallet linked to assets seized in the 2016 Bitfinex hack.
The investigation gained momentum after an argument was recorded during a group chat on the Telegram app between Leek and another person.
Update: The CMDSS company’s X account, website, and LinkedIn have just been deactivated. pic.twitter.com/nvN6u5XMPq
-ZachXBT (@zachxbt) January 25, 2026
The exchange was described as a “band-for-band argument” and involved both parties attempting to prove their control over large cryptocurrency balances.
During the exchange, Lick shared an Exodus wallet screen showing a Tron address containing approximately $2.3 million, followed by a direct transfer of approximately $6.7 million in Ethereum.
By the end of the session, almost $23 million had been accumulated in a single wallet.
By tracing the transactions back, ZachXBT linked this wallet to an address that received $24.9 million from a wallet controlled by the US government in March 2024.
The government’s speech was linked to the funds seized in the Bitfinex affair. ZachXBT previously reported unusual activity in October 2024, when approximately $20 million was withdrawn from similar government wallets.
Most of that money was returned within 24 hours, although around $700,000 transferred via instant swaps was not recovered.
The CMDSS contract came under scrutiny after the Government Accountability Office (GAO) rejected the protest.
The role of the CMDSS as a government contractor has already been closely examined.
After losing the Marshals Service contract, Wave Digital Assets filed a protest with the Government Accountability Office, arguing that CMDSS did not have the proper regulatory documents and raising concerns about a potential conflict of interest involving a former Marshals Service official.
The Government Accountability Office ultimately rejected the protest.
Broader questions have also been raised regarding the custody of cryptocurrencies. A February 2025 report from CoinDesk indicated that the Marshals Service had difficulty inventorying its digital asset holdings, attributing this to weak inventory management controls and an inability to estimate its Bitcoin reserves.
According to reports, illicit cryptocurrency addresses received a record $154 billion in 2025, a sharp increase from the previous year.
The post ZachXBT Claims Son of CEO of US Government Cryptocurrency Custody Firm Behind Wallet Theft appeared first on Cryptonews Arabic.