"The Crystal Vault" (or Bóveda de Cristal) refers to a centralized digital surveillance and control system launched by the Venezuelan government around December 2025, according to reports. It is a system designed to integrate identity records, financial systems, and access to social programs, creating a comprehensive tool for monitoring and controlling the population.
Here are the key aspects of the Crystal Vault as of early 2026:
- System Functionality: It merges citizen identity records, banking data, and social program participation for over 30 million people.
- Purpose & Control: It enables the state to enforce "civil death," where individuals deemed undesirable can be disconnected from banking, document renewal, and public services without visible repression.
- Infrastructure: The surveillance system is built by Chinese technology company ZTE.
- Vulnerabilities Exposed: Open-source intelligence (OSINT) projects have shown that the system was exposed through unsecured WordPress REST APIs, allowing researchers to access 27.7 GB of data, including staff GPS coordinates and government office locations.
- Context: Experts refer to this, along with the Sistema Patria, as part of an authoritarian control framework. [1, 2, 3, 4]
Note: There is also a physical "crystal chandelier" in the Venezuelan National Pantheon mentioned in search results, but the primary topic related to this search phrase in early 2026 is the digital surveillance system. [1]
💎
CRYSTAL VAULT
VENEZUELA OSINT DASHBOARD • 9.3 GB EXFILTRATED
30M+
CITIZENS TRACKED
9.3 GB
DATA EXFILTRATED
24,753
MEDIA FILES
345
STAFF GPS LOCATIONS
LA BÓVEDA DE CRISTAL — UNIFIED SURVEILLANCE
SAIME
Identity
Identity
BCV
Banking
Banking
Sistema Patria
21.8M Users
21.8M Users
CNE
Voter Data
Voter Data
Built by ZTE (China) • Merged Dec 24-26 2025
SAIME OPERATIONAL PROGRAMS
7,257
Ruta Pesquera
15,511
Ruta Indígena
56,785
Ruta Manuelita Sáenz
DATA SOURCES DISCOVERED
Mistral AI — Crystal Vault Analyst
Documenting Venezuela's surveillance infrastructure through their own open APIs.
The regime built a vault. They forgot to lock it.
Crystal Vault documents Venezuela's centralized surveillance database announced in December 2024. The system, built by Chinese company ZTE, merges citizen identity records, banking data, and social program participation for over 30 million Venezuelans.
The regime exposed their infrastructure through unsecured WordPress REST APIs. Approximately 27.7 GB of data was retrieved without authentication, including government office locations, staff GPS coordinates, and operational statistics.
| Metric | Count |
|---|---|
| Total Repository Size | 30.6 GB |
| Total Data Exfiltrated | 27.7 GB |
| Media Files | 72,883 |
| Images with EXIF Metadata | 13,209 |
| Staff Phone GPS Locations | 345 |
| OFAC Sanctioned Individuals | 470 |
| Cracked Gravatar Emails | 35 |
| CNE Intranet Routes Exposed | 154 |
| Personnel Records | 1,550 |
- Overview with key statistics
- Interactive map with 479 locations (134 SAIME offices + 345 GPS coordinates)
- Media gallery with 72,883 files across government agencies
- EXIF metadata analysis
- GPS Intel tab with phone model and datetime extraction
- Cracked Gravatar hashes (35 emails recovered)
- OFAC sanctions cross-reference
- Personnel database
- Iranian/Hezbollah presence in Venezuela
- Network analysis and connections
- Margarita Island specific intelligence
- Tourism and government overlap analysis
- Chronological events and data points
- Detailed GPS coordinate analysis
- Phone metadata extraction
- Venezuelan government terminology
- Agency abbreviations and explanations
| Agency | Description | Files |
|---|---|---|
| SAIME | Immigration & ID Services | 134 office locations |
| INCES | Worker Training Institute | Media files |
| AVN | State News Agency | Media files |
| SAREN | Notary Registry | Media files |
| VTV | State Television | Media files |
| CANTV | State Telecom | Media files |
| Sistema Patria | Social Control System | App ecosystem data |
crystal-vault/
├── index.html # Main dashboard
├── gps_section.html # GPS analysis
├── hezbollah_intel.html # Hezbollah intelligence
├── margarita_intel.html # Margarita Island intel
├── timeline.html # Event timeline
├── glossary.html # Terminology guide
├── OFAC_Sanctions/ # US Treasury sanctions data
├── OpenData/ # Government open data
├── assets/ # CSS, JS, images
├── docs/ # Documentation
└── exfil/ # Exfiltrated data samples
- WordPress REST API:
/wp-json/wp/v2/users - Media endpoints:
/wp-json/wp/v2/media - Geographic data:
/wp-json/various routes - CNE Intranet: 154 exposed internal routes
- 13,209 images processed for metadata
- 345 contained GPS coordinates from staff phones
- Phone models identified: Samsung, iPhone, Huawei, Xiaomi
- Timestamps extracted for operational patterns
- 35 email addresses recovered from MD5/SHA256 hashes
- Cross-referenced with WordPress user enumeration
- Key accounts: government webmasters, officials
This research serves:
- Journalists investigating Venezuelan government operations
- Researchers studying authoritarian surveillance systems
- The 7+ million Venezuelan refugees whose personal data remains in government databases
- Human rights organizations documenting abuses
All data comes from publicly accessible APIs and US government records (OFAC).
This repository documents publicly exposed government infrastructure for research and journalism purposes. No systems were compromised - all data was accessible without authentication through misconfigured public APIs.
MIT License - See LICENSE file for details.
