
BitBox fixes three severe firmware flaws
- BitBox shipped a security update after AI audits found two severe firmware flaws and a bootloader issue.
- The flaws could allow malicious firmware installation, but BitBox said no user funds were stolen.
- All three issues are fixed in firmware version 9.26.5, while older versions remain exposed.
BitBox shipped the Dixence update after finding two severe flaws and a bootloader issue in its BitBox02 firmware.
The issues required a successful phishing attack and the user to unlock a tampered device, according to BitBox.
BitBox said it had received no reports of stolen user funds and said users did not need to panic.
One flaw could let attackers load malicious firmware onto a genuine BitBox02 after a phishing attack.
Another flaw affected the Multi edition before wallet setup, while a third could lock funds to a wrong address.
BitBox fixed all three issues in firmware version 9.26.5, while older firmware remains exposed until users update.
BitBox used frontier AI models during its internal firmware review, while Bitcoin (CRYPTO:BTC) users remain the main audience for its hardware wallets.
At the time of reporting, Bitcoin price was $64,371.88.