The Contract That Came With Criminal Exposure

The Defense Federal Acquisition Regulation Supplement, at section 225.7303-3, prohibits the use of Foreign Military Financing funds to pay contingent fees. It does not say contingent fees require disclosure. It does not say they require prior approval. It says they are prohibited. The distinction matters because it forecloses every defense that begins with "we didn't know" and ends with a reference to industry custom.

FAR 52.203-5 — the Covenant Against Contingent Fees — was incorporated into the OASIS+ prime contract at Section I.2.2 and flowed through to Subcontract No. P000043846. Under it, Cyberlux certified to HII and through HII to FEDSIM that no person or selling agency had been employed or retained to solicit or obtain the contract for compensation contingent upon award or performance. That certification was made. The commission ecosystem documented in the interpleader record — described in detail in Section 2 of this analysis — appears facially inconsistent with it. Each claimant who filed a brief explaining why they deserve to be paid simultaneously documented conduct that appears difficult to reconcile with that certification.

The Anti-Kickback Act — 41 U.S.C. § 8702 — provides a parallel framework: it is unlawful to provide or receive anything of value, directly or indirectly, to any prime or subcontractor or agent, for the purpose of obtaining or rewarding favorable treatment in connection with a federal contract. The Montague Capital filing, entered in Texas receivership court in June 2025, attaches a signed commission agreement in which Cyberlux agreed to pay Montague for "sourcing and negotiating" the subcontract. That description — sourcing and negotiating a federal contract for compensation — is the conduct the Anti-Kickback Act addresses. Montague filed that document while trying to collect a debt. What they produced also documents the arrangement.

On April 15, 2026, five parties filed motions for summary judgment in the Eastern District of Virginia interpleader proceeding, each arguing for priority over $23,736,937.56 deposited with the Court. Read individually, each motion tells a business story. Read together, they constitute the most detailed public accounting of a commission ecosystem on a Foreign Military Financing contract that has been filed in a federal court — by the commission recipients themselves, under oath, with attached exhibits. Each filing documents, in its own words, the arrangement the regulatory prohibition addresses.

There is one party in the interpleader record that manufactured something. Thin Air Gear, LLC — claiming $1,385,489.46 — produced 2,100 wheeled drone kit bags for Cyberlux under a contract signed September 5, 2023, three days before the advance arrived. TAG delivered 1,722 bags to the warehouse in Spring, Texas. TAG's own brief states it plainly: "TAG is the only claimant to this action that manufactured and sold anything that is related to the Subcontract." That observation — offered by TAG to establish its own priority — simultaneously renders the other claims legible. Everyone else received or claims compensation for something other than manufacturing.

DFARS 225.7303-3 does not distinguish between commission arrangements for originating, sourcing, negotiating, securing, introducing, developing, or facilitating a government contract funded by FMF. The prohibition encompasses all of them. The filings above collectively describe each of those activities. The FAR 52.203-5 certification warranted that none of these arrangements existed. The interpleader record documents that multiple such arrangements did.

On September 7, 2023 — the day before the advance arrived — Cyberlux's Towne Bank account held $2,297.01. Federal regulations required the advance to be deposited in a segregated special account as government property, subject to a contractor paramount lien and close supervisory oversight by HII. HII's own draft documents had included that language. Cyberlux's counsel struck it before execution. HII accepted the deletion. The advance entered the general operating account on September 8, 2023 and what followed is documented by the Welter Declaration and confirmed by Cyberlux's own public financial filings.

The K8 was marketed and patented as a weapons delivery platform. Cyberlux's own patent makes this unambiguous in its technical claims. What that characterisation carries with it, under federal law, is a set of licensing and registration requirements. No evidence those requirements were met appears in any public record reviewed for this analysis.

The patent documents what Cyberlux designed. The company's own website documents what it tells the world it does. A business that publicly describes itself as engaged in the development of munitions, heavy and light weapons is describing precisely the category of enterprise that federal firearms and explosives licensing requirements were designed to reach. The manufacture of firearms — which the Gun Control Act defines to include destructive devices — requires a Federal Firearms Licence issued by the ATF. No Federal Firearms Licence for Cyberlux Corporation or Catalyst Machineworks LLC appears in any public record reviewed for this analysis. No evidence of a Federal Explosives Licence for either entity has been identified in the public record; no public database exists through which such a licence could be independently verified or excluded.

The provisional patent was filed July 9, 2022 — fourteen months before the subcontract was signed. The full patent was not issued until July 22, 2025 — two years after award, fourteen months after the Stop Work Order. The government contracted for 2,000 K8 systems whose detonation architecture, as documented in Cyberlux's own patent, incorporates blasting caps. Whether the systems were manufactured, transported, and exported without the required federal licences is a question this analysis raises. The government's investigation, confirmed active by OIG interviews in March 2026, is the appropriate mechanism to examine it.

The National Firearms Act raises a parallel question. Under 26 U.S.C. § 5845(f), a "destructive device" includes any combination of parts designed or intended for use in converting a device into an explosive or incendiary weapon. The K8 with its documented payload delivery system — airframe, blasting cap assembly, bump-rod contact fuse, radio fire switch — is a combination of parts potentially within that definition. Destructive devices are required to be registered with the ATF's National Firearms Registration and Transfer Record before manufacture, possession, or transfer. No NFA registration for the K8 or its weapons components appears in any public record reviewed for this analysis.

The K8 was marketed and patented as a weapons-delivery platform and is potentially regulated as a defense article under the Arms Export Control Act and ITAR. Ukraine received it through a Foreign Military Sales channel funded by FMF appropriations. ITAR Part 130 — at 22 C.F.R. §§ 130.1 et seq. — requires any person who pays or receives fees in connection with soliciting or promoting a defense article sale to disclose those fees to the Department of State. The commission arrangements documented in the interpleader record — ARG's $14.1 million claim, Fairwinds' $2.35 million claim, WeShield's $4.14 million claim, Montague's $3.5 million claim — each individually and collectively implicate disclosure obligations under Part 130. No Part 130 disclosure appears in any public record reviewed for this analysis.

WeShield co-founder Roman Vintfeld stated in his sworn declaration, filed as Exhibit B to the WeShield summary judgment motion, that WeShield conducted brokering activity in connection with the K8 procurement. ITAR Part 129 requires registration with the State Department as a defense article broker before engaging in brokering activities. No such registration for WeShield, Roman Investments PR LLC, or their principals appears in any public record reviewed for this analysis. That admission — offered to support a claim for compensation — simultaneously documents the activity.

On March 27, 2024 — ninety-seven days after the Stop Work Order — Cyberlux executed a Government Purchase Order Financing Agreement with Legalist SPV III, LP, a government receivables lender. The primary collateral for the $6.95 million facility was Subcontract No. P000043846 — the same contract that had been under Stop Work Order for ninety-seven days and that was terminated forty-seven days later. Under Section 3(a) of the Financing Agreement, Cyberlux warranted that its receivables were "genuine, bona fide, and collectable and without right of offset, counterclaim, or right of return or cancellation." Section 3(b) required immediate written notification of any dispute or right of cancellation. The Stop Work Order was precisely such a notice. No disclosure of it to Legalist appears in any public record reviewed for this analysis.

The subcontract was terminated for convenience on May 13, 2024. Cyberlux was formally notified on May 17. Between June 14 and August 27, 2024, Cyberlux submitted six draw requests to Legalist totalling approximately $4,030,000. The Financing Agreement required each draw to be accompanied by a certification that "no other event has occurred or circumstance exists that would permit it or Lender to terminate the Agreement... and all representations and warranties by it in the Agreement are true and correct as of the date hereof." Each certification was submitted after the primary collateral had been terminated. The largest single draw — $2,500,000 — was submitted on July 11, 2024: fifty-five days after Cyberlux received formal termination notification.

The price analysis the record does not document. FAR 15.404 required HII to conduct a price reasonableness analysis before awarding the Cyberlux subcontract. No evidence of a documented price analysis appears in any public filing reviewed for this analysis. The Signal message in which Cyberlux's CEO communicated a manufacturing cost of $4,700 — now a sworn exhibit in the interpleader record — produces a straightforward question: what did a price reasonableness analysis produce at $39,429 per unit? The regulation required the analysis. The public record contains no answer.

The certification the record may contradict. OASIS+ incorporated FAR 52.203-5 at Section I.2.2. HII certified to FEDSIM that no contingent fee arrangements existed in connection with obtaining the contract. The interpleader record documents that ARG held a 20% distribution right dated February 28, 2022 — eighteen months before the subcontract was signed. Whether HII had knowledge of any commission arrangement when it made and maintained that certification is a question this analysis raises and the investigation is positioned to examine.

The advance protections the record shows were deleted. FAR 32.409-3 required advance payment funds to be held in a segregated account as government property under a contractor paramount lien, with close supervisory oversight by HII. HII's own draft documents contained that language. Cyberlux's counsel struck it. HII accepted the deletion. The Curtin Supplemental Declaration, filed in federal proceedings in May 2026, states at paragraph 50 that no evidence has been identified showing HII reported any advance disbursement to FEDSIM, DSCA, or any oversight body.

Clause 9 — what the settlement document says. Modification No. 4, the termination settlement executed February 26, 2025, contained the following:

FAR 49.108-3 required the government Contracting Officer to independently review and approve the termination settlement. The CO who conducted that review received only what HII provided. The subcontractor — the party whose account of the subcontract's performance history was most directly adverse to HII's interests — was contractually prohibited from providing an independent account at the moment of the CO's most consequential decision. HII placed that prohibition in the settlement document. HII had Cyberlux sign it. The CO who approved $25,769,369.03 for warehouse inventory did so with HII as the sole information channel. Whether that structure raises questions under 18 U.S.C. § 1505 — obstruction of proceedings before a federal agency — is a question the statute and the document place in proximity.

The following maps the documented conduct to the federal statutes it potentially implicates, by company. Penalties shown are per-count statutory maximums. Federal sentencing guidelines produce sentences materially below these ceilings, modified by cooperation, criminal history, and judicial discretion. Civil FCA exposure runs parallel to and independent of any criminal proceeding — no conviction is required to pursue treble damages.

The civil False Claims Act exposure carries its own arithmetic. On the prohibited fees theory — the commission ecosystem embedded in invoices on FMF funds that cannot carry contingent fees — trebled on $48 million in documented government payments produces approximately $49 million minimum. On a full overcharge theory, the range extends toward $165 million. Per-claim civil penalties of $13,946 to $27,894 apply on top, across eight delivery invoices. None of it requires a criminal conviction to pursue.

This analysis required no access to internal documents, confidential sources, or investigative records. It required reading what is already filed in federal courts and searching what is already maintained in federal public databases. The commission claimants wrote the government's fact pattern in their own summary judgment briefs. The CEO's own sworn filing supplied the government's loss figure. The patent — filed in Cyberlux's own name — documented the detonation system. No evidence of required federal firearms or explosives licences for either company appears in any public record. The settlement document bears HII's own hand. The public financial filings confirm the account balances that bracket every disbursement. The OIG investigation confirmed active by interviews conducted in March 2026 is staffed by investigators with subpoena power who can examine what this analysis cannot reach.

The False Claims Act's qui tam provision — at 31 U.S.C. § 3730(b) — allows private parties with knowledge of fraud on the government to file a complaint under seal while the government investigates. The government has a year to decide whether to intervene. Given that the commission ecosystem is documented in sworn federal court filings by the recipients themselves, and that a federal investigation is already active, the qui tam window is analytically relevant. The government does not need a criminal conviction to pursue treble damages. It needs the facts. The underlying documentation is already in the public record.

Whether the documented conduct ultimately satisfies the elements of any civil or criminal claim would depend on facts beyond the public record and determinations made by enforcement authorities and courts. What this analysis has mapped is the conduct the record documents, the statutes that conduct potentially implicates, and the regulatory framework within which investigators and courts will make those determinations.

Five companies filed sworn briefs in federal court to collect their share of a government contract. They attached exhibits. They described under oath exactly what they did and how much they claim for having done it. In doing so, they described a commission ecosystem whose existence the contract's certification warrants against, whose payment is categorically prohibited under DFARS 225.7303-3, and whose structure falls within the territory the Anti-Kickback Act, the False Claims Act, and 18 U.S.C. § 287 each address.

They were not trying to blow the whistle. They were just trying to get paid. The documentation is in the record either way.

The documentary basis is grouped below by the company, entity, or public-record system it primarily supports. This keeps the source trail legible: first who the record concerns, then what document supplies the support, then why it matters to the analysis.