David Rush held a rank equivalent to an army general in the CIA’s science and technology division. He ran a genuine classified cash-for-intelligence program, the kind Congress funds without public trace. Then he invented another one — a fake “special access program,” the blackest of the black budget — briefed two colleagues on it, and used it to walk out of the building with more than three hundred two-pound gold bars, over $40 million in yellow metal. He moved the bars and $2 million in cash and dozens of luxury watches to his Virginia home and no one asked a question, because the system he exploited is designed so no one can. He was caught not for the theft but because he asked the Navy to pay him for time he had not served, a full decade after he left the military. The agency that vets the nation’s spies never noticed his graduate degree did not exist.
The fake program was a special access program — a compartment so sensitive that those read on to it cannot discuss it with their own supervisors. Rush told the two colleagues it was a joint operation with the Pentagon to ensure continuity of government in some catastrophic emergency. They were forbidden from talking to anyone else. No inspector general, no auditor, no supervisor outside those two had the jurisdictional authority to ask what the gold was for. The secrecy precautions that keep foreign intelligence services out kept the inspector general in the dark by the same stroke. A contract was filled out. A military contractor delivered the ingots. And the organization built to stop leaks became an organization built to stop questions. The “read-on” list is a permission to commit fraud.
An FBI affidavit then filled in what the CIA’s own legendary vetting had missed. Rush had given the agency contradictory accounts of his graduate degree — computer science on some forms, electrical engineering on others. The Bureau called the school. It had never heard of him. The Navy confirmed he had left the service a full decade before he claimed reservist pay on his time cards, and that the elite military test pilot he claimed to be held no pilot credentials of any kind. The CIA could not confirm that a man it housed, paid, and promoted for two decades had a single verifiable qualification. The alchemist in the science and technology division could not produce a real diploma, and the most rigorous background-investigation apparatus in the federal government never thought to ask for one.
This is not a one-off. In 1974, four burglars forced a security guard at gunpoint into Howard Hughes’s office and burned through a safe — and found evidence connecting Hughes to the Glomar Explorer, the CIA’s $350 million effort to raise a Soviet nuclear submarine from the ocean floor. The press inquiries gave the American language a permanent gift: the agency could “neither confirm nor deny.” Last year, the same Journal investigation that unearthed Rush’s operation found that the Air Force’s classification apparatus had allowed officials to fabricate an entire special access program claiming the government possessed secret alien technology. A White House budget official resigned over the very CIA spending oversight failures the Rush case makes undeniable. The walls, the unasked questions, the stovepipe so absolute that a lie in one cell cannot be crosschecked by the next — the pattern manufactures thieves on schedule.
And then there is the secrecy’s final turn, the one where it stops being an institutional failure and becomes a legal strategy. Former CIA officials describe it with a term of art: the “CIA defense.” When one of the agency’s own is caught in a criminal case, the institution sometimes works with prosecutors to make the charges go away, because a trial might expose legitimate classified programs. Darrell Blocker, a former deputy director of the CIA’s counterterrorism center, confirmed the playbook — the fear of disclosure is so great that defense attorneys learn to weaponize it as leverage, and the secrecy that enabled a man to walk out of the building with 600 pounds of gold becomes the same secrecy that keeps him out of a courtroom.
The man who could “neither confirm nor deny” couldn’t confirm his own hire. The gold, on the other hand, was real. An institution that cannot be questioned cannot be audited. An institution that cannot be audited will be robbed — not by the adversaries the system was built to stop, but by the insiders who understand that the highest wall is the one nobody is allowed to look behind.