BitBox reveals AI found severe firmware flaws in Bitcoin wallets

BitBox, the hardware wallet brand operated by Swiss firm Shift Crypto AG, disclosed two critical firmware vulnerabilities affecting its BitBox02 and BitBox02 Nova devices. The company says both flaws were identified through internal security audits that leveraged advanced AI models. The fixes shipped in the Dixence firmware update, version 9.26.5, which BitBox is urging all users to install immediately. Neither bug was exploited in the wild, no funds were stolen, and existing wallet seeds remain unaffected. What went wrong, and how AI caught it The first vulnerability involved memory corruption on unconfigured “Multi” edition devices. An attacker could potentially exploit this flaw to execute arbitrary code or install unauthorized firmware on a BitBox02 Multi that hadn’t yet been set up by its owner. The second flaw targeted the Silent Payments feature. The bug could inadvertently lock user funds at incorrect addresses. BitBox emphasized that this particular issue couldn’t enable direct theft without cooperation from an attacker, making it an accidental-loss risk rather than a direct theft scenario. BitBox also revisited a prior bootloader vulnerability that had been patched in fir...