BlockBeats News: On January 26, on-chain detective ZachXBT revealed how hacker John Daghita (alias Lick) stole over $40 million from addresses containing assets seized by the U.S. government (with the largest single transaction being $24.9 million). John's father owns CMDSS, a company currently holding a valid IT government contract in Virginia, assisting the U.S. Marshals Service in managing and liquidating law enforcement-seized cryptocurrency assets. ZachXBT speculated that John gained access through his father and stole over $40 million in assets from U.S. government addresses around 2024, with the largest theft occurring in March 2024, when he stole $24.9 million in funds seized by the U.S. government from the Bitfinex hack. Additionally, John's addresses are linked to over $90 million in on-chain stolen funds (including victims other than the U.S. government).
Following the exposure by ZachXBT, CMDSS's X account, website, and LinkedIn were all disabled today.
The exposure of John Daghita's identity originated from a recent display of wealth competition in a group chat with another hacker, Dritan Kapplani Jr. During this exchange, Daghita shared his Exodus wallet and transferred funds to demonstrate his wealth. The entire process was recorded in two videos. The wallet address used in this display is linked to the address that stole assets seized by the U.S. Federal Law Enforcement Bureau on the blockchain in March 2024.