Swiss hardware wallet company BitBox has announced the discovery of two critical vulnerabilities in its firmware, detected using advanced AI models. The first flaw affects the bootloader, allowing attackers to trick users into installing malicious firmware through phishing operations. The second is a memory issue that could have enabled arbitrary code execution and resulted in fund losses. A third previously patched issue, deemed more serious than initially reported, involved Silent Payments implementation that could have been exploited to lock bitcoins and demand ransoms. BitBox has released the Dixence update (firmware version 9.26.5) and urges all users to install it immediately. No user funds have been reported stolen.
Source: Read the original article
