---
title: "Discussion on \"Reverse Engineering the Gov.gr Wallet: How a Hardcoded API Key Exposed Millions of Citizens\" | Hashnode"
description: "Discussion on \"Reverse Engineering the Gov.gr Wallet: How a Hardcoded API Key Exposed Millions of Citizens\". Discover how security by obscurity fails in mobile applications. Explore the gov.gr wallet case and learn best practices for API secrets management."
url: "https://hashnode.com/posts/reverse-engineering-the-gov-gr-wallet-how-a-hardcoded-api-key-exposed-millions-of-citizens/6a15b169da253d50d4bf1ef5"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Reverse Engineering the Gov.gr Wallet: How a Hardcoded API Key Exposed Millions of Citizens](https://defprotocol.hashnode.dev/reverse-engineering-the-gov-gr-wallet-how-a-hardcoded-api-key-exposed-millions-of-citizens?utm_source=hashnode&utm_medium=feed)

Discover how security by obscurity fails in mobile applications. Explore the gov.gr wallet case and learn best practices for API secrets management.

May 26 · 6 min read · defprotocol.hashnode.dev  
Read the article

-   [#cybersecurity](https://hashnode.com/tag/cybersecurity)
-   [#devsecops](https://hashnode.com/tag/devsecops)
-   [#app-security](https://hashnode.com/tag/app-security)
-   [#reverse-engineering](https://hashnode.com/tag/reverse-engineering)
-   [#api-security](https://hashnode.com/tag/api-security)
-   [#sast](https://hashnode.com/tag/sast)
-   [#dast](https://hashnode.com/tag/dast)
-   [#code-quality](https://hashnode.com/tag/code-quality)

## Written by

[Marios Grivas](https://hashnode.com/@unfoundedomnis)

@unfoundedomnis

  
[View profile](https://hashnode.com/@unfoundedomnis)

#DEF

## Responses

Markdown supported · ⌘↵ to post

No responses yet.