Home›Crypto›Market Structure›BitBox issues firmware update for severe wallet vulner…

BitBox issues firmware update for severe wallet vulnerabilities

BitBox said the update addresses flaws that could allow malicious firmware installation or lock Bitcoin to an unintended address, though it reported no confirmed exploitation or losses.

Reported · Written up by our desk · Market Structure

Hardware wallet maker BitBox has released a firmware update, urging users to install version 9.26.5 after it identified two vulnerabilities it described as “severe” that could put self custody funds at risk.

In its security disclosure, BitBox said one issue involved memory corruption that affected Multi editions of BitBox02 and BitBox02 Nova devices that were not configured with a wallet. It warned that a malicious host could exploit the flaw to execute arbitrary code and potentially install malicious firmware, which could lead to lost funds.

The second vulnerability affected BitBox’s Silent Payments implementation. BitBox said a malicious host could potentially lock Bitcoin to an unintended address, and while direct theft was not possible, an attacker might demand a ransom to cooperate in recovering coins.

BitBox also stated it had received no reports of either vulnerability being exploited or causing users to lose funds. The update arrives amid broader scrutiny of hardware wallet incidents, including a Coldcard issue that had been linked to more than $112 million in Bitcoin thefts, according to details cited by Cointelegraph.

Latest closeBitcoin $64,093.21 ▼0.6%

More like this

Sources