On a Tuesday afternoon in Washington — the kind of afternoon where the light through the Fund's glass atrium turns the whole building into a terrarium of soft, bureaucratic weather — a disbursement was approved. SDR 101.96 million. One hundred thirty-eight million dollars, give or take the exchange rate's mood. Buried in the same document, almost as a procedural footnote, came the sentence that actually mattered: El Salvador would not accumulate further Bitcoin. The program was not terminated. The waiver was granted. And in San Salvador, a ledger that had once been the loudest experiment in monetary sovereignty quietly changed its grammar.
This is not, primarily, a story about Bitcoin. It is a story about what happens when the chaotic surface of a nation's ideological commitment meets the unyielding friction of conditional liquidity — when the cold algorithmic data of a sovereign balance sheet is forced to sit across the table from the human vulnerability of a government that needs dollars more than it needs narrative. I have watched this particular collision before, from different chairs, in different cycles. It always ends the same way. The narrative folds. The ledger remains.
Let me be precise about the architecture, because precision is the only courtesy we can extend to a system that is already decaying.
El Salvador's engagement with the International Monetary Fund runs through an Extended Fund Facility — a forty-month arrangement valued at approximately 1.4 billion dollars. The EFF is not charity; it is a conditional loan, structured around fiscal consolidation, pension reform, civil service reform, and — since the Bitcoin question became unavoidable — a specific set of expectations regarding the state's exposure to crypto assets. The disbursement approved this week is the latest tranche under that arrangement. It arrives bundled with a waiver: a formal recognition that El Salvador did not fully satisfy certain program conditions, but that its "corrective measures and recommitments" were sufficient to keep the program breathing.
That word — waiver — deserves more scrutiny than it usually receives. It is not absolution. It is a procedural tolerance, a way of saying: we see the deviation, we are choosing not to punish it this cycle, but the deviation remains on the record, and it will be waiting for you at the next review. The waiver is the IMF's way of maintaining the relationship while preserving its leverage — a mechanism of delayed judgment rather than forgiveness.
The Bitcoin experiment itself began in 2021, when El Salvador became the first sovereign state to grant Bitcoin legal tender status and launched Chivo, a state-operated custodial wallet. The ambition was explicit and, in its own way, beautiful: remittances without intermediaries, financial inclusion for the unbanked, a sovereign balance sheet denominated in an asset that no other sovereign controlled. The results were more ambiguous. Adoption of Chivo fell short of projections. Remittance flows through Bitcoin remained marginal. The sovereign reserve, built through public purchases, accumulated to several thousand coins — a position that, at various moments, represented either visionary conviction or unhedged speculation, depending entirely on the hour of the day.
Now, under the IMF program, three structural changes have converged. Bitcoin accumulation has stopped, save for recorded donations. Chivo has been transferred to private control, with the government relinquishing majority ownership and operational authority. And the remaining public-sector exposure — the coins still sitting on the sovereign balance sheet — has been described in IMF language as something that "should ultimately be unwound."
Read that sentence again. Not "may be unwound." Not "could be unwound at an appropriate time." Should be unwound. The modal verb is doing an enormous amount of quiet work. And what it signals is not a policy adjustment. It is a directional reversal.
The Chivo privatization is the load-bearing wall of this story, and almost nobody is looking at it directly.
When a state exits the retail crypto wallet business, it is doing more than outsourcing operations. It is abandoning a policy instrument. Chivo was never merely a wallet; it was the distribution layer for a monetary ideology. It was how the government touched users, how it collected data, how it signaled that Bitcoin was not an abstraction but a daily utility. Transferring it to private operators means the state has concluded that the operational cost, the compliance liability, and the reputational exposure of running a custodial crypto service are no longer worth the political benefit.
I have seen this pattern before, at a much smaller scale. In 2017, I deployed a minimal DAO prototype in Solidity, funded with €15,000 of my own savings, convinced that I was building the skeleton of a new organizational form. When the Parity wallet multisig bug froze those funds — along with a meaningful slice of the ecosystem's early infrastructure — I learned something that has never left me: the gap between theoretical decentralization and practical security is not a gap. It is a chasm, and people fall into it. Chivo's privatization is the sovereign-scale version of the same lesson. The architecture was elegant in the whitepaper. The operation was fragile in the world.
Consider what a sovereign custodial wallet actually requires. Key management at national scale. KYC and AML infrastructure that satisfies both domestic law and international pressure. Liquidity provisioning for withdrawals. Audit trails that survive political transitions. None of these are glamorous. All of them are existential. And the IMF's insistence on "increased transparency regarding public sector crypto asset holdings" is a polite way of saying that the current disclosures are insufficient — that the state cannot fully account for what it holds or how it holds it.
Public sector Bitcoin custody is one of the least-discussed systemic risks in the entire asset class. When a private individual loses a key, it is a personal tragedy. When a sovereign state loses a key, it is a fiscal event. When a sovereign state cannot prove where its keys are, it is a governance failure — and the IMF, whatever else it is, is in the business of pricing governance failures.
The economics of a sovereign reserve in retreat are more interesting than the headline numbers suggest.
El Salvador's Bitcoin position was always a strange hybrid: part speculative asset, part sovereign branding, part geopolitical statement. It generated value in three registers simultaneously. There was the potential price appreciation, which is the only register that appears on a conventional balance sheet. There was the brand value — the "Bitcoin country" label, which attracted tourism, media attention, and a certain kind of foreign investment. And there was the signaling value — the message to the international system that a small nation could choose an asset outside the dollar's gravitational field.
The IMF financing delivers value in a completely different register. One point three eight billion dollars of direct liquidity. The international credit endorsement that unlocks other multilateral financing. And, crucially, a reduction in the cost of sovereign borrowing that dwarfs any plausible Bitcoin appreciation.
The choice El Salvador made was not ideological. It was arithmetic. And this is where the story becomes genuinely instructive for anyone watching the broader crypto cycle. A sovereign state — one with genuine ideological commitment, led by a president with high approval ratings and a demonstrated capacity for execution — concluded that the certainty of multilateral liquidity was worth more than the optionality of a volatile reserve asset. That is not a failure of Bitcoin. It is a demonstration of how the international financial architecture prices uncertainty. The IMF did not defeat Bitcoin in El Salvador. The IMF simply offered a better risk-adjusted return.
I spent three months in 2020 modeling liquidity flows inside Aave v2, and I identified an under-collateralization risk in stablecoin pairs that prompted me to withdraw fifty thousand euros of exposure weeks before the anchor instability. That experience taught me something about institutional behavior that applies directly here: when an entity is large enough to have balance-sheet obligations, it will always choose the instrument with the most predictable settlement. Aave's stablecoin pairs were theoretically sound and practically fragile. Sovereign Bitcoin reserves are theoretically sovereign and practically illiquid. The institution — whether it is a lending protocol or a nation-state — eventually gravitates toward the asset it can actually use.
The IMF has become the shadow regulator of sovereign crypto policy, and this case establishes the template.
Look at the compliance matrix that emerges from the program documents. Bitcoin accumulation: stopped. Public sector crypto transparency: insufficient, improvement required. Crypto asset company supervision: insufficient, strengthening required. Chivo operations: transferred to private control, partial satisfaction. AML: insufficient. Beneficial ownership disclosure: insufficient. Asset declaration: insufficient.
This is not a set of suggestions. It is a regulatory perimeter, drawn by an institution that was not designed to regulate crypto at all. The IMF was built to manage balance-of-payments crises, not digital asset policy. And yet, through the mechanism of conditional lending, it has effectively written the crypto policy of a member state — not by legislation, but by the quieter violence of conditionality.
This is the most underappreciated structural development in crypto regulation of the past two years: the emergence of multilateral financial institutions as de facto crypto regulators, operating through the leverage of liquidity rather than the authority of statute. The SEC regulates through enforcement. The IMF regulates through the disbursement schedule. The second is more effective, because it operates on a timeline the recipient cannot ignore.
And note the mechanism precisely. The waiver was granted because El Salvador offered "corrective measures and recommitments." That is not compliance. That is a promissory note. The IMF is accepting a promise in exchange for continuing the program, which means the leverage compounds. At the next review, the same conditions will be waiting — plus whatever new ones have accumulated. This is how conditionality works. It is a ratchet, not a switch.
For anyone who has watched the regulation of DAOs, this should feel familiar. In 2021, I spent four months analyzing the economic models behind the major NFT collections, and what I found was a consistent pattern: the appearance of decentralization was a compliance shield, and the team wallets were always traceable. The gap between the governance narrative and the actual control structure was the whole story. El Salvador's Bitcoin policy is the sovereign version of the same phenomenon — a bold decentralization narrative wrapped around a balance sheet that was always, in the end, answerable to a central authority.
The narrative has already migrated, and this event merely confirms the direction of travel.
In 2021, El Salvador's Bitcoin adoption was a global headline. It was the proof-of-concept for the thesis that nation-states could adopt a non-sovereign monetary asset. It was covered breathlessly, debated endlessly, and cited by every crypto advocate as evidence that the future had arrived.
In 2025, the policy reversal is a footnote. The market barely moved. And that non-reaction is the real story.
The market's desensitization to El Salvador is not indifference. It is a signal that the locus of sovereign Bitcoin narrative has shifted from small nations to superpowers. The United States' 2025 executive order establishing a Strategic Bitcoin Reserve did not just create a new institutional holder. It relocated the entire narrative center of gravity. The question is no longer whether a small country can adopt Bitcoin. The question is how the largest economy in the world will manage the Bitcoin it has already seized and may yet acquire.
El Salvador's retreat does not weaken that narrative. It clarifies it. The era of the "Bitcoin nation" — a small state using a non-sovereign asset to defy the international financial order — is over. What replaces it is the era of the "Bitcoin superpower" — a large state absorbing the asset into its existing strategic framework. The first was romantic. The second is inevitable.
And here is the part that should unsettle anyone who has been paying attention to the competitive dynamics of sovereign adoption: the same IMF conditionality that constrained El Salvador will be available to constrain every other small nation that considers following the same path. The waiver precedent cuts both ways. It shows that deviation is tolerable. It also shows that deviation has a price, and the price is paid at the next review.
Consider the field as it stands. Bhutan mines Bitcoin through hydroelectric capacity, a model that is quiet, resource-based, and largely insulated from the IMF's conditional machinery because it never made a legal-tender claim. The Central African Republic adopted Bitcoin as legal tender and then retreated so quickly that the episode barely registered. The United States holds seized Bitcoin and now frames it as strategic reserve policy. The UAE and Hong Kong cultivate regulatory friendliness without sovereign accumulation. Each of these models occupies a different point on the risk spectrum, and El Salvador's turn signals which point the international system tolerates.
The competitive lesson is brutal in its clarity: the sovereign adoption strategies that survive are the ones that do not require borrowing from the institutions that would constrain them. Bhutan mines. The United States seizes. El Salvador borrowed — and discovered that borrowed sovereignty is not sovereignty at all.
The technical dimension of this story is where the analysis becomes uncomfortable, because the public record is almost silent.
A sovereign Bitcoin reserve requires, at minimum, a custody architecture. Is the reserve held in a single multisig? Distributed across multiple custodians? Insured? Audited by whom, to what standard? The IMF's demand for "increased transparency" is a diplomatic formulation, but its technical content is precise: the Fund is asking whether the state can actually demonstrate control of the assets it claims to hold.
I have spent the better part of a decade thinking about this problem in a different context — the problem of verifying that a protocol's claimed decentralization is real rather than theatrical. When I audited the Ethereum 1.0 architecture in 2017, the question was never whether the code compiled. The question was whether the assumptions embedded in the code survived contact with adversarial reality. The same question applies to sovereign Bitcoin custody. The code compiles. The question is whether the key management survives contact with a finance ministry, an election cycle, and a staff rotation.
The silence on this point is not an accident. It is a disclosure gap, and disclosure gaps are where risk accumulates invisibly. If El Salvador's Bitcoin holdings are held under a custody arrangement that no external party has audited, then the true state of the sovereign balance sheet is unknowable — not just to the public, but potentially to the IMF itself. That is the deepest structural problem in the entire experiment. Not the price. Not the politics. The epistemology. A reserve you cannot verify is not a reserve. It is a belief.
The reform agenda reveals the real cost structure of the arrangement.
The IMF program requires fiscal consolidation, pension reform, and civil service reform. These are not technical adjustments. They are political surgeries, and they are performed on a body that has historically rejected them. The fact that "earlier delays" are already noted in the program documents tells you everything about the execution risk. The government is not being asked to change a policy. It is being asked to restructure the social contract.
Bukele's political capital is the variable that determines whether this succeeds. The IMF's own assessment notes that the economy has performed better than expected, "supported by improved security and increased investor confidence." That is a direct acknowledgment that the security policies — the ones that made Bukele internationally controversial and domestically beloved — are the foundation of the current economic stabilization. The Bitcoin narrative was always downstream of the security narrative, not the other way around. The government's popularity rests on public safety, not on monetary experimentation. And that is why the Bitcoin retreat is politically survivable: it costs the government almost nothing with its actual base.
The domestic political calculation is straightforward. A voter in San Salvador cares about whether the streets are safe and whether the economy is stable. They do not care whether the central bank holds Bitcoin or dollars. The Bitcoin policy was always a project of the international image, not the domestic reality. And when the international image collided with the international financing, the financing won — because the financing was real and the image was, in the end, a story.
What should be tracked, going forward, are the signals that the public documents do not state.
The first is the sovereign Bitcoin wallet. If the holdings are on-chain — and the public claims suggest they are — then large outflows would be visible. A transfer to an exchange is a sell signal. A transfer to an unfamiliar custody address is a restructuring signal. Either way, the chain will tell the truth before the government does. On-chain monitoring of sovereign wallets is the highest-value intelligence in this entire situation, and it requires no special access — only attention.
The second is the next IMF review. The program's rhythm is the real policy clock. If the next review finds conditions unmet again, the waiver will not be automatic. The IMF's tolerance is not infinite; it is calibrated. Each waiver is a withdrawal from a finite account of patience.
The third is Chivo's operational data. A privatized wallet will either improve or decay, and the outcome will tell us whether state operation was the problem or whether the underlying demand was always insufficient. If a private operator cannot make Chivo work, then the wallet's failure was never about management. It was about the product.
And the fourth, which almost nobody is watching, is the behavior of other nations that have quietly considered the Bitcoin path. Argentina, Paraguay, and several others have flirted with the idea in political rhetoric without committing to policy. Their calculus has now changed — not because Bitcoin has become less attractive, but because the cost of adoption has become legible. El Salvador's retreat is a price tag, and every finance ministry in the developing world can now read it.
Here is where I want to push against the consensus reading, because the consensus reading is too tidy.
The dominant interpretation of this event is that El Salvador "gave up" on Bitcoin — that the experiment failed, that the IMF won, that the sovereign adoption narrative is dead. I find that reading both too cynical and too simple.
Consider what El Salvador actually retained. It kept its Bitcoin holdings — the "unwinding" is described as something that "should" happen, with no timeline attached. It kept the brand — the world still knows El Salvador as the country that tried. It kept the option — because a government that stops accumulating has not promised to stop holding, and the modal gap between "no further accumulation" and "no divestment" is a legal space wide enough to drive a policy through.
The retreat may be less a surrender than a strategic pause — a recognition that the cost of further accumulation exceeded the benefit, while the cost of holding remained acceptable. That is not capitulation. That is portfolio management.
And the deeper contrarian point: the market's non-reaction to this news may be the most important data point of all. If a sovereign state reversing its Bitcoin policy produces no price movement, then Bitcoin has achieved something the enthusiasts never fully articulated — it has become too large, too institutionally embedded, and too widely held to be moved by the decisions of any single small nation. The failure of El Salvador to move the market is, paradoxically, evidence of Bitcoin's maturation. The asset no longer needs the narrative of sovereign adoption because it has acquired the narrative of institutional absorption.
There is a version of this story in which El Salvador is not a cautionary tale but a pioneer who arrived too early — who proved that the model was technically feasible before the world was ready to price it. And there is a version in which the country simply made a rational trade. Both versions are true. Neither is the version being told.
What remains, after the headlines fade, is a question about the architecture of the next cycle. If the IMF can write the crypto policy of a member state through conditionality, then the future of sovereign crypto adoption will not be decided in the parliaments of small nations. It will be decided in the boardrooms of multilateral lenders and the strategic planning offices of superpowers. The chaotic surface of national experimentation is giving way to a quieter, more durable structure — one in which the freedom to adopt is always subordinate to the need to borrow. Watch the wallets. Watch the review calendar. And watch whether the next small nation that considers the Bitcoin path remembers what it cost the first one to walk it.