2027 Election: Atiku Expresses Concern Over Outdated BVAS

Former Vice President, Alhaji Atiku Abubakar has expressed concern over the revelation that the Bimodal Voter Accreditation System, BVAS, is currently running on Android version 10.
The BVAS is one of the technologies introduced by the Independent National Electoral Commission, INEC, to ensure free and fair elections in Nigeria.
Atiku’s concern, which was contained in a statement issued on Tuesday by the Atiku Media Office, followed the Osun State mock-accreditation failures of August 1, 2026.
Atiku also said that Monday’s revelation by the Independent National Electoral Commission’s (INEC) Director of ICT, Dr Lawrence Bayode, exposed the inadequacies of the BVAS, a critical asset in the conduct of elections in Nigeria.
Bayode, speaking on Arise TV on Monday, said that BVAS, which was first introduced into Nigeria’s elections in 2021, is currently running on Android version 10.
Reacting to this, Atiku, who is the presidential candidate of the African Democratic Congress, ADC, in the 2027 general election, said “what the INEC ICT Director did not say, however, is that the Android version 10 is outdated as it reached end of life in 2023, meaning that it is no longer getting updates or security patches.”
According to the ADC presidential candidate, running an election technology platform like BVAS on an outdated operating system poses severe cyber and operational risks.
“He wonders why INEC with its humongous budget cannot update the BVAS software long before the 2027 general elections or even before the series of off season elections like the Osun State governorship election during which the updated version would have been test run.
“Atiku said that the nonchalant attitude of handling the BVAS issue is suspicious and a deliberate attempt to subvert the integrity of the country’s elections,” the Atiku Media Office said in the statement.
The former vice president insisted that the vulnerability could allow criminal elements or hackers to bypass the BVAS application entirely, gain root access to the device file system, and potentially alter cached voter logs or polling unit result files before they are transmitted.
Noting that since BVAS machines must necessarily transmit polling unit results over weak public telecommunication networks to the INEC Result Viewing, IReV, portal, he said that outdated cryptographic foundations elevate the risk of Man-in-the-Middle (MitM) attacks.
He said sophisticated actors could intercept, block, or manipulate data packets over the air with such outdated equipment.
“The former Vice President pointed out that because BVAS handles both fingerprint and facial recognition, an outdated biometric framework (such as INEC is still using), has the potential of ‘reducing the system’s accuracy and resilience against spoofing methods such as fingerprint and photo bypasses.’
“He expressed deep concern that “bugs or memory leaks within legacy system frameworks can cause the app to crash during peak voting hours —leading to “technical glitches” and delayed accreditations as have been witnessed in the past.’
“He supported the position of cybersecurity expnoerts that ‘running critical national infrastructure on an end-of-life operating system creates a broad attack surface. To safeguard election integrity, it is vital to perform an independent, comprehensive code and hardware audit of the BVAS devices,’” Atiku’s Media Office said.