BitBox patches wallet flaws that could install malicious firmware

BitBox has released a firmware update fixing two severe vulnerabilities that could have exposed hardware wallet users to malicious firmware or caused Bitcoin to be locked to an unintended address. Summary BitBox has patched two severe vulnerabilities affecting its BitBox02 and BitBox02 Nova hardware wallets. One flaw could have allowed malicious firmware installation, while another could have locked Bitcoin to an unintended address. BitBox said neither vulnerability had been exploited and no user funds were reported lost. The fixes follow a Coldcard firmware flaw linked to more than $112 million in Bitcoin thefts. BitBox said in a security disclosure on Monday that the first vulnerability involved memory corruption affecting unconfigured Multi editions of the BitBox02 and BitBox02 Nova, while a second flaw affected the wallet maker’s Silent Payments implementation. The company said it had found no evidence that either vulnerability had been exploited and had received no reports of users losing funds because of the flaws. BitBox vulnerability could have allowed malicious firmware For the first vulnerability, BitBox said a malicious host connected to an affected wallet could exploit ...