John “Lick” Daghita was arrested on the Caribbean island of Saint Martin on Wednesday after U.S. and French authorities coordinated an operation tied to an alleged theft of more than $46 million in cryptocurrency linked to wallets overseen by the U.S. Marshals Service, according to reporting that cited a statement from FBI Director Kash Patel.
The arrest follows weeks of public on-chain analysis by blockchain investigator ZachXBT, who said the detention came “as a direct result” of his investigation into suspected movements from government seizure-related funds.
The case highlights a growing enforcement pattern in crypto: public blockchain data can surface suspicious flows quickly, then the hard part becomes mapping those flows to a real person and converting that into a custody and arrest operation.
In late January, ZachXBT published an on-chain thread and related chat evidence that he said tied a wallet cluster to an individual using the alias “Lick,” claiming the funds originated from U.S. government seizure activity.
The immediate market impact is limited, but the underlying mechanism is meaningful. The alleged target was connected to the operational perimeter around seized assets, and the episode puts a spotlight on the weak link that matters most in institutional crypto custody: key access controls.
The U.S. Marshals Service has used contractors to help manage and dispose of seized or forfeited crypto assets. A U.S. Government Accountability Office decision on a related procurement describes a contract scope centered on “managing and disposing of seized cryptocurrency assets,” the kind of work that can create sensitive access pathways if segregation of duties and key management are not airtight.
If the allegations are proven, the lesson for custodians and large holders is that crypto theft is not only an external hacking problem. It can also be an insider access problem, where incentives, weak operational controls, and poor key hygiene create “one person, one mistake” failure modes.
The other notable signal is enforcement velocity. Public on-chain investigators can surface anomalies in days, which pressures institutions to respond with faster incident triage, better address monitoring, and clearer audit trails for key access events.
The post John ‘Lick’ Daghita Arrested in Saint Martin After ZachXBT On-Chain Trail appeared first on Crypto Adventure.