French gendarme tactical units and FBI agents conducted a joint operation in St. Martin, Caribbean, arresting John Daghita, known online as "John" or "Lick," on suspicion of stealing cryptocurrency assets from a US government-controlled wallet. FBI Director Kash Patel confirmed the arrest on social media, posting photos of the seized hardware wallet and a briefcase containing a large amount of US dollars. The case stems from the disappearance of over $20 million in cryptocurrency from a federally managed wallet in October 2024, assets previously seized during the 2016 Bitfinex exchange hack investigation. Blockchain analysis traced approximately $24.9 million of the original seized funds to addresses controlled by the suspect, belonging to a larger cluster of addresses managing over $90 million in suspicious assets. The investigation progressed thanks to the work of blockchain researcher ZachXBT, who publicly traced transaction flows related to the compromised government wallet in January 2026. The suspect's father, Dean Daghita, is the president of Command Services & Support, a company that received a contract from the U.S. Marshals Service in October 2024 to oversee the custody and liquidation of certain categories of forfeited cryptocurrencies. This connection triggered an investigation into access to internal systems.