BitBox deploys update after finding two critical hardware wallet flaws

Swiss hardware wallet maker BitBox has deployed a security update after an AI-assisted internal security audit found two critical vulnerabilities in BitBox02 firmware. One flaw could have allowed an attacker to install malicious firmware and steal funds if a user was tricked by phishing into installing a fake BitBox app and then unlocked the device. The other involved memory corruption in the BitBox Multi Edition, which could have enabled arbitrary code execution when connected to a malicious computer. BitBox said both issues were fixed in the latest firmware, v9.26.5, and no cases of real-world exploitation or theft of user funds or wallet seed phrases have been confirmed.