BitBox discloses two severe hardware wallet vulnerabilities, fixed in firmware v9.26.5

Odaily Planet Daily News: Bitcoin News posted on X platform that BitBox disclosed two severe hardware wallet vulnerabilities, stating there is currently no evidence that these vulnerabilities were exploited or resulted in user fund theft. All disclosed issues have been fixed in firmware v9.26.5, and BitBox urges all users to update immediately. The internal security audit uncovered two severe vulnerabilities, as well as new details regarding a previously fixed bootloader vulnerability. One vulnerability affecting BitBox Multi devices could allow a malicious host to execute arbitrary code and install malicious firmware on devices that have not yet completed setup. Another vulnerability in Silent Payments could allow attackers to use a malicious host device to redirect funds to unintended addresses, causing Bitcoin to be locked and potentially enabling extortion attacks. BitBox also disclosed that the previously fixed bootloader vulnerability could allow attackers to trick users into installing malicious firmware capable of stealing funds.