Hackers leaked the source code and user data of El Salvador's Chivo Wallet, escalating cybersecurity concerns and casting doubt on the security of the country's pioneering Bitcoin adoption strategy.
In a recent security breach, the hacker group CiberInteligenciaSV has escalated its attacks on El Salvador's state-operated Bitcoin wallet, Chivo, by leaking parts of its source code. The incident, which took place on April 23, was announced on the BreachForums, a platform known for black hat hacking activities. The hackers made a statement saying, "This time I bring you the code that is inside the Bitcoin Chivo Wallet ATMs in El Salvador, remember that it is a government wallet, and as you know, we do not sell, we publish everything for free for you.”
This concerning event comes on the heels of an earlier breach in April, where the group is said to have leaked the personal data of approximately 5.1 million Salvadorans, a number that represents a significant portion of the country's adult population.
Local cybersecurity group VenariX alerted the public on April 22 about the impending leak, referring to a post by CiberInteligenciaSV on their Telegram channel. The post indicated an imminent release of part of the Chivo Wallet's source code and VPN access, stating, "Tonight we will publish part of the source code and VPN access that belongs to Chivo Wallet, for free as always, unless one of you nosy government people wants to talk."
El grupo #hacker #CiberInteligenciaElSalvador, anuncia en su cuenta de Telegram que publicará parte del código fuente y accesos VPN de #Chivo #Wallet (@chivowallet), la billetera oficial de #Bitcoin y #Dólar creada por el #Gobierno de #ElSalvador 🇸🇻 (@Gobierno_SV)... pic.twitter.com/AUG8PM1VN8
— VenariX en Español (@_venarixES_) April 22, 2024
The released file, named 'Codigo.rar,' reportedly contains a compilation of code and VPN credentials associated with the Chivo Wallet's ATM network.
El Salvador made history in September 2021 by becoming the first country to adopt Bitcoin as legal tender. The Chivo wallet was launched as the official BTC wallet for Salvadorans, enabling the purchase, sale, storage, and ATM withdrawal of Bitcoin. However, the wallet's launch was marred by reports of numerous bugs and technical issues.
Despite the significant nature of the security breaches, the Salvadoran government has not yet publicly addressed the data leak or the recent exposure of the wallet's source code. The lack of an official statement has added to the confusion and concern surrounding the safety and integrity of the Chivo wallet.
The ramifications of these security incidents are yet to be fully understood, but they could potentially affect the trust in and stability of the country's pioneering Bitcoin adoption strategy. The continued silence from Salvadoran authorities on the matter raises questions about the measures being taken to protect the financial data and privacy of its citizens.
