The hacker flaunts wealth and reveals identity, having stolen over $40 million in on-chain assets from the U.S. government

On-chain detective ZachXBT revealed how hacker John Daghita (alias Lick) stole over $40 million from addresses of assets seized by the U.S. government (with the largest single amount being $24.9 million). John's father owns CMDSS, a company that currently has a valid IT government contract in Virginia to assist the U.S. Marshals Service in managing/disposing of seized/confiscated cryptocurrency assets.

ZachXBT speculated that John gained access from his father and completed the theft of over $40 million in assets from U.S. government addresses around 2024, with the largest theft being $24.9 million in March 2024, which was seized from the U.S. government due to the Bitfinex hack. Additionally, John's address is associated with over $90 million in on-chain stolen funds (including non-U.S. government victims). Following ZachXBT's exposure, CMDSS's X account, website, and LinkedIn were all deactivated today.

The exposure of John Daghita's identity was triggered by his recent display of wealth in a group chat with another hacker, Dritan Kapplani Jr., where he shared his Exodus wallet and transferred funds to prove his wealth. The entire process was recorded in two videos, and his flaunting wallet address is linked to the address of seized assets from the U.S. Federal Bureau of Investigation in March 2024.