{"id":215023,"date":"2026-08-18T21:06:52","date_gmt":"2026-08-18T21:06:52","guid":{"rendered":"https:\/\/mycryptomania.com\/?p=215023"},"modified":"2026-08-18T21:06:52","modified_gmt":"2026-08-18T21:06:52","slug":"bitbox-warns-bitcoiners-after-discovering-severe-vulnerability-in-firmware","status":"publish","type":"post","link":"https:\/\/mycryptomania.com\/?p=215023","title":{"rendered":"BitBox Warns Bitcoiners After Discovering \u2018Severe\u2019 Vulnerability In Firmware\u00a0"},"content":{"rendered":"

Bitcoin Magazine<\/a><\/p>\n

BitBox Warns Bitcoiners After Discovering \u2018Severe\u2019 Vulnerability In Firmware\u00a0<\/a><\/p>\n

<\/div>\n

Bitcoin wallet manufacturer BitBox has told users it was able to fix \u201csevere vulnerabilities\u201d with its hardware wallet\u2019s firmware, and reassured users that no funds were taken. Yet it still urged users to upgrade carefully.\u00a0<\/p>\n

Writing in a blog post Tuesday, the Swiss company said<\/a> that one of the vulnerabilities would have allowed an attacker to manipulate users into installing firmware that could lead a criminal to steal funds.\u00a0<\/p>\n

Users should update firmware through the official BitBoxApp, ideally by clicking the in-app update prompt rather than searching for it, BitBox said.\u00a0<\/p>\n

\n

We just released the Dixence security update.<\/p>\n

During our internal audits, we were able to discover and fix multiple security issues in the BitBox firmware. <\/p>\n

We recommend our users to update their BitBoxApp and device firmware through the BitBoxApp settings.\u2026<\/p>\n

\u2014 BitBox (@BitBoxSwiss) August 17, 2026<\/a>\n<\/p><\/div>\n

\u201cThere are no reports of stolen user funds and there is no reason for users to panic,\u201d the company said. \u201cWe recommend all users to update their BitBox devices to the latest firmware version, which fixes all security issues described in this article.\u201d<\/p>\n

It added that another \u201csevere vulnerability\u201d discovered was related to memory corruption. In its post, BitBox said the finding was related to the Multi edition of the BitBox, and could enable arbitrary code execution and the subsequent installation of malicious firmware and potential loss of funds.\u00a0<\/p>\n

BitBox also mentioned that the Bitcoin-only edition of the BitBox was not affected, as its firmware does not contain the affected code.\u00a0<\/p>\n

Bitcoiners are still reeling after users of the popular Coldcard product, designed by Canadian company Coinkite, had their funds drained<\/a> due to a firmware bug in the devices that lead to a weak seed generation (RNG). Unlike the Coldcard hack, users or BitBox do not need to migrate funds, only update the firmware.\u00a0<\/p>\n

Hackers have since stolen a confirmed<\/a> $115 million in bitcoin, according to Galaxy Research\u2019s latest figures \u2014 but the figure could be much higher.\u00a0<\/p>\n

Canadian company Coinkite first warned users on July 31 that a firmware bug in Coldcard Mk3 devices \u2014 starting with version 4.0.1 in March 2021 \u2014 caused seed generation to fall back to a weak software Pseudorandom Number Generator instead of the hardware true random number generator, allowing hackers to essentially guess investor seedphrases.\u00a0<\/p>\n

The number has slowly risen as the criminals have targeted more recent devices while Coinkite and other Bitcoiners have urged Coldcard users to immediately move their funds.<\/p>\n

This post BitBox Warns Bitcoiners After Discovering \u2018Severe\u2019 Vulnerability In Firmware\u00a0<\/a> first appeared on Bitcoin Magazine<\/a> and is written by Mathew Di Salvo<\/a>.<\/p>","protected":false},"excerpt":{"rendered":"

Bitcoin Magazine BitBox Warns Bitcoiners After Discovering \u2018Severe\u2019 Vulnerability In Firmware\u00a0 Bitcoin wallet manufacturer BitBox has told users it was able to fix \u201csevere vulnerabilities\u201d with its hardware wallet\u2019s firmware, and reassured users that no funds were taken. Yet it still urged users to upgrade carefully.\u00a0 Writing in a blog post Tuesday, the Swiss company […]<\/p>\n","protected":false},"author":0,"featured_media":215024,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[],"class_list":["post-215023","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-discovery"],"_links":{"self":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/215023"}],"collection":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"replies":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=215023"}],"version-history":[{"count":0,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/posts\/215023\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=\/wp\/v2\/media\/215024"}],"wp:attachment":[{"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=215023"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=215023"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/mycryptomania.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=215023"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}