El Salvador's journey as the first country to adopt Bitcoin as legal tender has hit a new snag as hacker activities continue to undermine the security of the state-operated Chivo Bitcoin wallet. In a recent development, a hacker group named CiberInteligenciaSV has released parts of the source code for Chivo on a notorious black hat hacking forum, BreachForums.
Hackers Leak Chivo Wallet Code
On April 23, CiberInteligenciaSV made headlines by releasing part of Chivo's source code along with VPN credentials that are integral to the wallet's ATM network. This leak was distributed via a file named Codigo.rar, which was posted for free, echoing the group's previous approach of not selling the data they acquire. The post by the hacker group read, “This time I bring you the code that is inside the Bitcoin Chivo Wallet ATMs in El Salvador, remember that it is a government wallet, and as you know, we do not sell, we publish everything for free for you.”
Ongoing Security Breaches
This incident is part of a series of security breaches that Chivo has faced. Earlier in April, there was a massive leak involving the personal data of approximately 5.1 million Salvadorans, virtually the entire adult population of the country. Despite the scale of this breach, the Salvadoran government has yet to formally address or acknowledge the issue, adding to the public's concerns about data security.
Warnings and Alerts
Prior to the latest leak, a local cybersecurity initiative, VenariX, alerted the public to the impending release of the source code via a post on the social media platform X. CiberInteligenciaSV had also hinted at their plans through a post on their Telegram channel, stating, “Tonight we will publish part of the source code and VPN access that belongs to Chivo Wallet, for free as always, unless one of you nosy government people wants to talk.”
Background and Implications
Since its launch in September 2021, Chivo has been promoted by the Salvadoran government as the official Bitcoin wallet for its citizens, facilitating Bitcoin transactions including purchases, sales, and ATM withdrawals. However, the platform has been plagued by various bugs and technical glitches from the start, which have only been exacerbated by these security issues.
The ongoing leaks and the lack of a governmental response have created a climate of uncertainty and mistrust among users and observers alike. This situation poses significant questions about the security measures in place to protect the financial and personal data of Salvadoran citizens engaged in Bitcoin transactions. As El Salvador continues to navigate its pioneering role in cryptocurrency adoption, the effectiveness of its cybersecurity measures remains a critical concern.
Notice:
,,The information and views presented in this article are intended solely for educational purposes and should not be taken as investment advice in any situation. The content of these pages should not be regarded as financial, investment, or any other form of advice. We caution that investing in cryptocurrencies can be risky and may lead to financial losses.“