We use cookies to personalise content and ads, to provide social media features and to analyse our traffic. We also share information about your use of our site with our social media, advertising and analytics partners who may combine it with other information that you’ve provided to them or that they’ve collected from your use of their services.
Necessary cookies help make a website usable by enabling basic functions like page navigation and access to secure areas of the website. The website cannot function properly without these cookies.
_cfuvidThis cookie is a part of the services provided by Cloudflare - Including load-balancing, deliverance of website content and serving DNS connection for website operators.
Maximum Storage Duration: SessionType: HTTP Cookie
__cf_bm [x7]This cookie is used to distinguish between humans and bots. This is beneficial for the website, in order to make valid reports on the use of their website.
CookieConsentStores the user's cookie consent state for the current domain
Maximum Storage Duration: 1 yearType: HTTP Cookie
Preference cookies enable a website to remember information that changes the way the website behaves or looks, like your preferred language or the region that you are in.
We do not use cookies of this type.
Statistic cookies help website owners to understand how visitors interact with websites by collecting and reporting information anonymously.
We do not use cookies of this type.
Marketing cookies are used to track visitors across websites. The intention is to display ads that are relevant and engaging for the individual user and thereby more valuable for publishers and third party advertisers.
We do not use cookies of this type.
Unclassified cookies are cookies that we are in the process of classifying, together with the providers of individual cookies.
List of domains your consent applies to: [#BULK_CONSENT_DOMAINS#]
Cookie declaration last updated on 8/12/26 by Cookiebot
[#IABV2_TITLE#]
[#IABV2_BODY_INTRO#]
[#IABV2_BODY_LEGITIMATE_INTEREST_INTRO#]
[#IABV2_BODY_PREFERENCE_INTRO#]
[#IABV2_BODY_PURPOSES_INTRO#]
[#IABV2_BODY_PURPOSES#]
[#IABV2_BODY_FEATURES_INTRO#]
[#IABV2_BODY_FEATURES#]
[#IABV2_BODY_PARTNERS_INTRO#]
[#IABV2_BODY_PARTNERS#]
About
Cookies are small text files that can be used by websites to make a user's experience more efficient.
The law states that we can store cookies on your device if they are strictly necessary for the operation of this site. For all other types of cookies we need your permission.
This site uses different types of cookies. Some cookies are placed by third party services that appear on our pages.
You can at any time change or withdraw your consent from the Cookie Declaration on our website.
Learn more about who we are, how you can contact us and how we process personal data in our Privacy Policy.
Please state your consent ID and date when you contact us regarding your consent.
Install NewsLayer
Get the app experience — one tap from your home screen, instant loads and breaking-news alerts.
BitBox Warns Bitcoiners After Discovering ‘Severe’ Vulnerability In Firmware
Bitcoin wallet manufacturer BitBox has told users it was able to fix “severe vulnerabilities” with its hardware wallet’s firmware, and reassured users that no funds were taken. Yet it still urged users to upgrade carefully.
Yazan Mathew Di SalvoPublisherBitcoin Magazine 2 dk okuma
Bitcoin wallet manufacturer BitBox has told users it was able to fix “severe vulnerabilities” with its hardware wallet’s firmware, and reassured users that no funds were taken. Yet it still urged users to upgrade carefully.
Writing in a blog post Tuesday, the Swiss company said that one of the vulnerabilities would have allowed an attacker to manipulate users into installing firmware that could lead a criminal to steal funds.
Users should update firmware through the official BitBoxApp, ideally by clicking the in-app update prompt rather than searching for it, BitBox said.
“There are no reports of stolen user funds and there is no reason for users to panic,” the company said. “We recommend all users to update their BitBox devices to the latest firmware version, which fixes all security issues described in this article.”
It added that another “severe vulnerability” discovered was related to memory corruption. In its post, BitBox said the finding was related to the Multi edition of the BitBox, and could enable arbitrary code execution and the subsequent installation of malicious firmware and potential loss of funds.
BitBox also mentioned that the Bitcoin-only edition of the BitBox was not affected, as its firmware does not contain the affected code.
Bitcoiners are still reeling after users of the popular Coldcard product, designed by Canadian company Coinkite, had their funds drained due to a firmware bug in the devices that lead to a weak seed generation (RNG). Unlike the Coldcard hack, users or BitBox do not need to migrate funds, only update the firmware.
Hackers have since stolen a confirmed $115 million in bitcoin, according to Galaxy Research’s latest figures — but the figure could be much higher.
Canadian company Coinkite first warned users on July 31 that a firmware bug in Coldcard Mk3 devices — starting with version 4.0.1 in March 2021 — caused seed generation to fall back to a weak software Pseudorandom Number Generator instead of the hardware true random number generator, allowing hackers to essentially guess investor seedphrases.
The number has slowly risen as the criminals have targeted more recent devices while Coinkite and other Bitcoiners have urged Coldcard users to immediately move their funds.
MD
Enjoyed this story?
Follow Mathew Di Salvo and get alerted the moment their next story goes live.
