BitBox Discloses Two Severe Hardware Wallet Vulnerabilities and Urges Immediate Update

Bitcoin News said on X that BitBox disclosed two severe hardware wallet vulnerabilities and said there is no evidence they were exploited or caused user funds to be stolen. According to Odaily, all disclosed issues have been fixed in firmware v9.26.5, and BitBox urged all users to update immediately.BitBox said an internal security audit found two severe vulnerabilities, along with new details about a previously fixed bootloader flaw. One issue affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not completed setup. Another vulnerability in Silent Payments could let an attacker use a malicious host device to redirect funds to an unintended address, lock bitcoin, and potentially carry out extortion attacks. BitBox also said the previously fixed bootloader flaw could have allowed attackers to trick users into installing malicious firmware that steals funds.