Chivo Bitcoin Wallet Breached: VPN and Source Code Credentials of Chivo Bitcoin Wallet Compromised

The notorious hacking group, CiberInteligenciaSV, has targeted the El Salvador Bitcoin Chivo Wallet, but this setback has not deterred El Salvador from its commitment to its Bitcoin strategy. In fact, the country has recently integrated a Bitcoin Diploma program into its schools.
The Chivo Wallet, which serves as the official Bitcoin wallet for El Salvadoran nationals, has fallen victim to a security breach. The attack was carried out by CiberInteligenciaSV, a group of hackers, and has resulted in the exposure of the Chivo Wallet’s source code and VPN.
The hack took place on Tuesday when CiberInteligenciaSV released a portion of the source code on BreachForums, a well-known forum for cybercriminals. The hacker group stated, “This time I bring you the code that is inside the Bitcoin Chivo Wallet ATMs in El Salvador, remember that it is a government wallet, and as you know, we do not sell, we publish everything for free for you.”
This breach raises concerns about the security of the Chivo Wallet, especially as it comes less than a month after the personal information of around 5.1 million Salvadorans was exposed in a previous attack. Interestingly, local cybersecurity project VenariX hinted at the recent attack a day before it occurred, stating on the X platform, “The hacker group CiberInteligenciaSV announces in its Telegram account that it will publish part of the source code and VPN accesses of Chivo Wallet.”
In addition to leaking the source code, the hackers also released VPN credentials that could potentially allow unauthorized users to access the network that manages the Chivo ATMs throughout the country. The consequences of this leak are significant, as it raises concerns about the integrity of the Chivo Wallet itself, potentially giving hackers unauthorized access or control over user accounts. Moreover, the exposure of the codes and VPN details also raises fears of identity theft and fraud among the population. The Salvadoran government has yet to issue an official statement regarding the breach.
The Chivo wallet was launched in September 2021 as part of El Salvador’s ambitious plan to legalize Bitcoin as a legal tender and reduce reliance on traditional banking systems. President Nayib Bukele stated at the time that all 200 ATMs in El Salvador were fully operational, along with an additional 50 installed in the US for the use of Salvadorans.
The wallet offers several benefits to users, including free deposits, withdrawals, and purchases. Users can also transfer funds between their bank accounts and their Chivo wallets. Additionally, the option to top up the Chivo wallet with credit, debit, and gift cards is available. Despite some technical glitches, the Chivo wallet has been an interesting development.
However, the nation is taking proactive measures to promote the acceptance of Bitcoin among its population. As previously reported, El Salvador recently introduced a Bitcoin Diploma program in public schools to enhance students’ awareness and understanding of Bitcoin’s technology.