BitBox Firmware Vulnerabilities Fixed, Users Urged to Update Devices
BitBox, a Swiss company behind the BitBox hardware wallet, has revealed two severe vulnerabilities in its firmware. The company discovered the issues during internal audits and has since released an update to fix them.
The first vulnerability would have allowed attackers to manipulate users into installing malicious firmware that could lead to stolen funds. The second issue was related to memory corruption and could enable arbitrary code execution, potentially resulting in the loss of funds.
However, BitBox emphasized that there are no reports of stolen user funds and reassured customers that they should not panic. The company recommends that all users update their devices to the latest firmware version to fix the security issues.
The vulnerabilities were discovered in the Multi edition of the BitBox, but the Bitcoin-only edition was not affected as its firmware does not contain the affected code.