According to BitcoinMagazine,
Bitcoin wallet manufacturer BitBox has told users it was able to fix “severe vulnerabilities” with its hardware wallet’s firmware, and reassured users that no funds were taken. Yet it still urged users to upgrade carefully.
Writing in a blog post on Tuesday, the Swiss company said that one of the vulnerabilities would have allowed an attacker to manipulate users into installing firmware that could lead a criminal to steal funds.
Users should update firmware through the official BitBoxApp, ideally by clicking the in-app update prompt rather than searching for it, BitBox said.
“There are no reports of stolen user funds and there is no reason for users to panic,” the company said. “We recommend all users to update their BitBox devices to the latest firmware version, which fixes all security issues described in this article.”
It added that another “severe vulnerability” discovered was related to memory corruption. In its post, BitBox said the finding was related to the Multi edition of the BitBox, and could enable arbitrary code execution and the subsequent installation of malicious firmware and potential loss of funds.[1]This actually proves that other hardware wallets might have issues as well. The coldcard incident made the other wallet company check their own code, too. Imagine Bitbox never checked its firmware, and something like coldcard happened to the Bitbox users as well. The crypto community would start thinking that none of those hardware wallets are safe anymore. BitBox users could be the next target. So, choose your wallet wisely.
[1] -
https://bitcoinmagazine.com/news/bitbox-warns-users-about-vulnerability
