{ "id": "ae71d620-13f5-4d84-bd8f-5c116766d221", "created_at": "2026-04-06T00:10:22.961118Z", "updated_at": "2026-04-10T13:12:14.343834Z", "deleted_at": null, "sha1_hash": "4999d62a2365ba72ab8dbb9fcd471b5fb90d6fb1", "title": "CySecurity News - Latest Information Security and Hacking Incidents: Cryptocurrency Chaos: El Salvador's Bitcoin Wallet Code Leaked, Privacy at Risk", "llm_title": "", "authors": "", "file_creation_date": "0001-01-01T00:00:00Z", "file_modification_date": "0001-01-01T00:00:00Z", "file_size": 243950, "plain_text": "CySecurity News - Latest Information Security and Hacking\r\nIncidents: Cryptocurrency Chaos: El Salvador's Bitcoin Wallet\r\nCode Leaked, Privacy at Risk\r\nBy CySecurity News, twitter.com/ehackernews\r\nArchived: 2026-04-05 19:04:06 UTC\r\nThere was a security breach with El Salvador's state Bitcoin wallet, Chivo, after hackers from the group\r\nCiberInteligenciaSV leaked a part of its source code to a hacking forum. In the earlier leak of personal data\r\nbelonging to nearly all of El Salvador's adults, the code from Chivo Wallet ATMs as well as VPN credentials had\r\nbeen exposed. According to the wallet administration, there has been no compromise with the security of the\r\nwallet's data. \r\nChivo Wallet had several challenges since it was revealed that it would be the official Bitcoin storage tool after its\r\nlaunch, so this event has become another blight on the Chivo Wallet. President Nayib Bukele set Bitcoin (BTC) as\r\nlegal tender in El Salvador in 2021 to make digital payments more convenient. However, security breaches and\r\ntechnical issues have made the adoption of Bitcoin (BTC) difficult. \r\nhttps://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html\r\nPage 1 of 3\n\nThe Chivo Wallet has been criticized by consumers for its slow operation, app crashes, vulnerabilities to\r\nexploitation, and lack of official backing, despite its official backing. The Chivo Wallet company has responded to\r\nallegations that it was linked to a data breach in which over 5 million Salvadorans' personal information was\r\nallegedly exposed. \r\nIn addition to full names, unique identifiers, dates of birth, addresses, phone numbers, emails, and photographs, all\r\nof this data was leaked. The data had been rumoured to be related to the KYC processes that the Salvadoran\r\ngovernment required its citizens to complete before they could be offered incentives, such as $30 in Bitcoin at the\r\nwallet’s launch, by the Salvadoran government. \r\nOn April 6, the hacker group CiberInteligenciaSV compromised 5.1 million Salvadoran data. Recently, the same\r\nhackers leaked the source code for Chivo Wallet and the VPN credentials for the ATM network. The Chuvo\r\nBitcoin wallet, backed by the government, has caused controversy among peer-to-peer money enthusiasts and\r\ncrypto punks alike for its custodial status. \r\nIn a press release published on X (formerly Twitter) on April 24, the company commented on the matter,\r\ndescribing it as “fake news.” Furthermore, a group of individuals from the Salvadoran community who\r\ndownloaded the wallet have released over 144 GB of data containing their personal information. Even though it\r\nwas available for purchase on various channels since August, it was only leaked for download on April 5. \r\nThis data includes a user's full name, unique identifier, date of birth, address, and a high-definition picture of their\r\nface, as well as their full name, unique identifier, and date of birth. Also included in this week's leaked information\r\nwas the file Codigo.rar, which contained information on El Salvador's Chivo ATM network, including the code\r\nand VPN credentials for the network.\r\nGovernment officials have yet to come out with a formal statement regarding either of the hacks that took place\r\nthis month. As a result of the leak of the code and VPN details of the source, the Chivo wallet system is at risk of\r\nbeing compromised, making hackers able to gain access to users' accounts or control them unauthorizedly. \r\nThe particularity of the data exposed previously affects almost the entire adult population of El Salvador, which\r\nmakes them fear identity theft and fraud as a result of the exposure of personal data previously exposed. In light of\r\nthese breaches, security experts advise users to be vigilant and to monitor their accounts for any suspicious\r\nbehaviour if they see anything strange. \r\nEl Salvador is a country where incompetence is prevalent and there is a good chance that this will have a\r\nsignificant impact on the financial ecosystem as well, as trust in the government's digital solutions might wane as\r\na result. In the beginning, the Chivo software was plagued with numerous software bugs and technical glitches as\r\nusers reported numerous problems with the software. \r\nDespite the President's promise to give them $30 for downloading the Chivo wallet, some people were not able to\r\nwithdraw money from Chivo because some had trouble getting it. The Salvadoran government announced last\r\nyear that over 100 ATMs across the country will be equipped with lightning network technology in Q4 2024. \r\nOver 100 ATMs across the country will be equipped with this technology. In theory, this technology could allow\r\nSalvadorians to withdraw and deposit Bitcoins in an easier and faster manner with a lower fee. It was reported in\r\nhttps://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html\r\nPage 2 of 3\n\nOctober by a Salvadoran newspaper that only about 2% of the Salvadoran population was making remittance\r\npayments through the wallet, which had been its main selling point for a long time. \r\nIt has yet to be decided whether or not the Salvadoran government will declare a policy on this issue or formally\r\naddress the issue. The state of El Salvador has become the first in the world to adopt Bitcoin as a legal tender in\r\n2021, promoting the Chivo wallet as one of the official mediums used to engage with Bitcoin by its citizens. \r\nThe fact that these security issues exist in addition to the absence of communication from the authorities leaves\r\nthe Salvadorans with an uncomfortable sense of uncertainty as to whether or not their personal information is safe\r\nand if this digital wallet offered by the state is reliable.\r\nSource: https://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html\r\nhttps://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html\r\nPage 3 of 3", "extraction_quality": 1, "language": "EN", "sources": [ "MISPGALAXY", "Malpedia" ], "origins": [ "web" ], "references": [ "https://www.cysecurity.news/2024/04/cryptocurrency-chaos-el-salvadors.html" ], "report_names": [ "cryptocurrency-chaos-el-salvadors.html" ], "threat_actors": [ { "id": "049031c3-b9d7-4a08-b5f8-55120ee7389d", "created_at": "2024-05-23T02:00:03.980245Z", "updated_at": "2026-04-10T02:00:03.640143Z", "deleted_at": null, "main_name": "CiberInteligenciaSV", "aliases": [], "source_name": "MISPGALAXY:CiberInteligenciaSV", "tools": [], "source_id": "MISPGALAXY", "reports": null } ], "ts_created_at": 1775434222, "ts_updated_at": 1775826734, "ts_creation_date": 0, "ts_modification_date": 0, "files": { "pdf": "https://archive.orkl.eu/4999d62a2365ba72ab8dbb9fcd471b5fb90d6fb1.pdf", "text": "https://archive.orkl.eu/4999d62a2365ba72ab8dbb9fcd471b5fb90d6fb1.txt", "img": "https://archive.orkl.eu/4999d62a2365ba72ab8dbb9fcd471b5fb90d6fb1.jpg" } }