Frostsnap fixes two security issues, releases v0.4.0, and adds firmware downgrade protection

Odaily Planet Daily News: Bitcoin multisignature hardware wallet Frostsnap has released version v0.4.0, fixing two security issues, and no user fund losses have been found so far. First, a malicious signing request could mark a certain output as belonging to the user's wallet. The device did not verify this claim and it would not be displayed on the confirmation screen, potentially leading to funds being transferred to an address the user had never seen. Second, change addresses could fall outside the wallet's recovery scan range, causing funds to appear missing after backup recovery, although the relevant funds were actually still in the wallet. After the update, the application will prompt users to upgrade their device firmware, and firmware downgrade protection has been added. The Frostsnap team recommends that users update the application and firmware as soon as possible.