Bitkey addresses vulnerability flagged by researcher, confirms no risk to funds

Bitkey, the self-custodial Bitcoin wallet, patched a vulnerability in its recovery and inheritance contact setup flows on August 1 after security researcher @1440000bytes flagged the issue. The bug was confirmed, fixed, and submitted to app stores the same day it was reported. No user funds were at risk. What happened and why it didn’t matter (much) The vulnerability existed within a specific window during the enrollment process for Bitkey’s recovery and inheritance contact features. Bitkey’s Engineering Lead, Clay Garrett, confirmed the bug on the same day it was discovered. He noted that the flaw required exceptional conditions to actually exploit, meaning an attacker would need a very specific set of circumstances to even attempt it. Bitkey’s wallet architecture uses defense-in-depth, a layered security approach where multiple independent safeguards protect user funds. Even if someone had managed to exploit the vulnerability during that narrow window, the wallet’s underlying architecture would have prevented unauthorized access to funds. Bitkey told users that normal wallet operations could continue without concern, emphasizing the limited scope of the issue. The patch was submi...