{"slug": "bitcoin-wallet-maker-bitbox-says-ai-found-severe-flaws-in-firmware", "title": "Bitcoin Wallet Maker BitBox Says AI Found Severe Flaws in Firmware", "summary": "BitBox, the Zurich-based maker of the BitBox02 cryptocurrency wallet, released the Dixence security update after internal AI audits found two severe firmware vulnerabilities and a bootloader issue. Exploiting the flaws required a phishing attack and user unlocking of a tampered device, but BitBox said no user funds were stolen and the wallet seed was never at risk. The fixes are included in firmware version v9.26.5, and older versions remain exposed until users update.", "body_md": "#### In brief\n\n- BitBox shipped the Dixence update after internal AI audits found two severe vulnerabilities plus a bootloader issue.\n- Exploiting them required a successful phishing attack plus the user unlocking a tampered device.\n- BitBox says no user funds were stolen and the wallet seed was never at risk.\n\nBitBox, the Zurich-based maker behind the BitBox02, [released](https://blog.bitbox.swiss/en/bitbox-08-2026-dixence-update/) the Dixence security update this week after its own engineers uncovered two severe flaws in the cryptocurrency wallet's firmware.\n\nThe company disclosed the issues itself, with no evidence they were ever exploited. But the news itself is likely enough to set off the alarms of most Bitcoin holders, given the recent exploit of hardware wallet maker Coldcard that’s resulted in over $130 million in stolen BTC.\n\nFor BitBox, the first problem lives in the bootloader, the code that decides which firmware a device will accept. A fix shipped in July's Oeschinen release (v9.26.2) closed most of it, but BitBox now says the original issue was worse than first reported. An attacker who ran a phishing scam—tricking a user into installing a fake BitBoxApp and unlocking the device—could have loaded malicious firmware onto a genuine BitBox02 and walked off with the coins.\n\nThe BitBox02 Nova, the newer model, was never exposed because of its bootloader version.\n\nThe second severe bug is a memory-corruption flaw in the Multi edition of the BitBox before it's been set up with a wallet. Paired with a hostile computer, it could allow arbitrary code execution and, again, malicious firmware. The Bitcoin-only edition doesn't carry the affected code, so it's clear.\n\nA third issue, less dangerous, touched the wallet's silent-payment feature. It couldn't steal coins directly, but could have locked funds to a wrong address in a ransom-style move. All three are fixed in v9.26.5.\n\nBitBox leaned on frontier AI models during its internal review, part of a wider push the company described in a [separate post](https://blog.bitbox.swiss/en/firmware-updates-in-the-age-of-ai-staying-up-to-date-matters-more-than-ever/) about auditing firmware with AI help.\n\nIt’s another reminder that hardware wallets, long considered the ideal choice for security-conscious crypto users, aren't bulletproof.\n\nThe [Coldcard Bitcoin exploit ](https://decrypt.co/374916/coldcard-bitcoin-exploit-explained-entropy-keys-bits)showed how a five-year-old firmware bug let thieves drain roughly 1,596 BTC, the largest hardware-wallet hack of 2026. Days ago, the data breach of hardware wallet maker [SafePal ](https://decrypt.co/375743/safepal-bitcoin-wallet-data-breach)stoked fresh fears of so-called wrench attacks on wallet owners whose personal details, including physical addresses, were exposed.\n\nIn this case, BitMox says there’s nothing to worry about besides updating. Per BitBox's disclosure, \"There are no reports of stolen user funds and there is no reason for users to panic.\"\n\nThe fix is live at [bitbox.swiss/download](http://bitbox.swiss/download), and older firmware stays exposed until users install it.", "url": "https://wpnews.pro/news/bitcoin-wallet-maker-bitbox-says-ai-found-severe-flaws-in-firmware", "canonical_source": "https://decrypt.co/375886/bitcoin-wallet-bitbox-ai-severe-flaws-firmware", "published_at": "2026-08-18 18:06:42+00:00", "updated_at": "2026-08-18 18:12:09.479284+00:00", "lang": "en", "topics": ["ai-tools", "ai-safety"], "entities": ["BitBox", "BitBox02", "BitBox02 Nova", "Coldcard", "SafePal", "Dixence", "Oeschinen"], "alternates": {"html": "https://wpnews.pro/news/bitcoin-wallet-maker-bitbox-says-ai-found-severe-flaws-in-firmware", "markdown": "https://wpnews.pro/news/bitcoin-wallet-maker-bitbox-says-ai-found-severe-flaws-in-firmware.md", "text": "https://wpnews.pro/news/bitcoin-wallet-maker-bitbox-says-ai-found-severe-flaws-in-firmware.txt", "jsonld": "https://wpnews.pro/news/bitcoin-wallet-maker-bitbox-says-ai-found-severe-flaws-in-firmware.jsonld"}}