The FBI found 303 gold bars in his government office. The man who stacked them was a senior CIA officer — seventeen years on credentials he never earned, running a program that did not exist. This is not a lapse. This is the machine working as designed.
David Rush, the executive intelligence agent charged last month with stealing $40 million in gold bars, did not break into the vault. He built the vault. He invented a “special access program,” the agency’s most restrictive security protocol — the kind that keeps secrets even from the people whose job is keeping secrets — and the machinery did exactly what it was built to do. You cannot audit what you are not permitted to know exists. You cannot question a program you are forbidden to acknowledge. The same architecture that protects real secrets protects the man who invents fake ones. Call him “His Access.”
Rush did not hack the system. He used it. He read two colleagues into a fiction of continuity-of-government so sensitive, he explained, that no one could ask what it was for. Then he convinced one of them to route millions through a bogus contract. He made up a contract, a government source told the Washington Post, in the tone you’d use to describe a man who printed his own money and did not expect to be noticed.
For seventeen years, the agency’s credential-checking apparatus — the polygraphs, the background investigations, the mandatory annual security reviews — failed to notice that the man had never earned the college degree he listed, had never served in the military capacity he claimed, and had spent his career padding timecards with 744 hours of fake Navy leave worth $77,000. He was drawing a CIA paycheck while pretending to be a reservist. The agency that is supposed to know everything about everyone could not see what was sitting in its own personnel file. Meanwhile, the gold bars accumulated. FBI agents recovered the 303 bullion bars — each a 2.2-pound ingot of the pure stuff, worth more than $40 million — alongside dozens of luxury watches and more than $2 million in foreign currency. From a government office. The smallness is the most damning part. The man who stole forty million dollars also padded his timesheets.
I’ve watched intelligence agencies finance their own shadows since the Church Committee. The specific disguise changes — Iran-Contra’s diverted missile profits, the billions that went missing in Iraq’s reconstruction, the Pentagon’s $35 trillion in accounting adjustments the comptroller could never reconcile — but the architecture is constant. When spending is secret and oversight is a ritual, the only firewall between a billion-dollar slush fund and a personal payday is the conscience of the man holding the key. Rush had no conscience. The architecture had no backup.
And he will likely serve less time than someone who stole a single gold bar from a jewelry store. This is the two-tier justice system in its purest form, the one that let the HSBC drug-money launderers write a check and walk, that settled with Wells Fargo for opening millions of fake accounts without touching a single executive, that has never charged a Sackler with a crime for a quarter-million overdose dead. The Treasury was looted from a black box, and the response will be a quiet personnel action and a report to a committee that cannot read aloud what it finds.
The gold bars will sit in a vault. David Rush will enter the federal courtroom in Alexandria, his lawyers already preparing the motion to discuss his service in a closed session, his sentence already being calibrated to make room for the secrets he might still spill. He will not be made an example. He will be made an exception. The jewelry-store thief had no clearance to plead.