Odaily Planet Daily reports that Bitcoin News posted on X that BitBox has disclosed two critical hardware wallet vulnerabilities, stating there is currently no evidence these vulnerabilities have been exploited or led to the theft of user funds. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two critical vulnerabilities, along with new details regarding a previously patched bootloader vulnerability. One vulnerability affecting the BitBox Multi device could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could enable attackers using a malicious host device to redirect funds to unintended addresses, locking up bitcoins and potentially enabling ransomware attacks. BitBox also disclosed that the previously patched bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.
BitBox Discloses Two Critical Hardware Wallet Vulnerabilities, Fixed in Firmware v9.26.5
KuCoinFlashShare
Summary
BitBox has disclosed two critical hardware wallet vulnerabilities tied to recent security reports. These flaws could allow malicious hosts to execute arbitrary code or redirect funds. Firmware v9.26.5 resolves these issues, including a security breach risk on BitBox Multi devices and a vulnerability in Silent Payments. The vulnerabilities were identified during an internal audit. BitBox has urged users to update immediately. One flaw could permit the installation of malicious firmware on unconfigured devices, while the other could result in Bitcoin lockups and ransom attacks.
Source:Show original
Disclaimer: The information on this page may have been obtained from third parties and does not necessarily reflect the views or opinions of KuCoin. This content is provided for general informational purposes only, without any representation or warranty of any kind, nor shall it be construed as financial or investment advice. KuCoin shall not be liable for any errors or omissions, or for any outcomes resulting from the use of this information.
Investments in digital assets can be risky. Please carefully evaluate the risks of a product and your risk tolerance based on your own financial circumstances. For more information, please refer to our Terms of Use and Risk Disclosure.