BitBox has released firmware updates to address two critical vulnerabilities affecting its hardware wallets. The first flaw involved memory corruption in unconfigured BitBox02 Multi and BitBox02 Nova devices and could potentially allow a malicious host to install compromised firmware. The second affected the wallet’s Silent Payments feature and could cause Bitcoin to be locked to an unintended address. BitBox said it has no reports of users losing funds through either vulnerability and has patched both issues.
