Home›Crypto›Market Structure›BitBox urges users to update after finding severe firm…

BitBox urges users to update after finding severe firmware flaws

BitBox said its patched firmware removes risks that could enable attackers to manipulate users into installing malicious updates, without any reports of stolen funds.

Reported · Written up by our desk · Market Structure

Bitcoin wallet maker BitBox said it discovered and fixed multiple “severe” vulnerabilities in its hardware wallet firmware, and that the company reassured customers no funds were taken. In a blog post Tuesday, BitBox said one vulnerability could have let an attacker manipulate users into installing firmware that could enable theft.

BitBox urged users to update through the official BitBoxApp, ideally by using the in-app update prompt rather than searching for the update. It also said users should update their BitBoxApp and device firmware through BitBoxApp settings.

The company added that another severe issue related to memory corruption could, in the Multi edition of its devices, allow arbitrary code execution and the subsequent installation of malicious firmware, potentially leading to loss of funds. BitBox said the Bitcoin-only edition was not affected because its firmware does not include the affected code.

BitBox said there were no reports of stolen user funds and told users there was no reason to panic. It also contrasted the situation with the earlier Coldcard incident, noting that BitBox users do not need to migrate funds and only need to update firmware.

Latest closeBitcoin $64,594.40 ▲0.1%

More like this

Sources