BitBox discloses two critical hardware wallet vulnerabilities, fixed in firmware v9.26.5

Odaily Planet Daily News: Bitcoin News posted on X platform stating that BitBox has disclosed two critical hardware wallet vulnerabilities, adding that there is currently no evidence that these vulnerabilities have been exploited or resulted in user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. An internal security audit uncovered two critical vulnerabilities, along with new details about a previously fixed bootloader vulnerability. One vulnerability affecting the BitBox Multi device could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow an attacker to exploit a malicious host device to redirect funds to unintended addresses, causing Bitcoin to be locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware that could steal funds.