BitBox, a Swiss hardware-wallet maker, has disclosed two severe vulnerabilities in its firmware. The bugs were found with the help of frontier AI models, and users running older firmware versions remain exposed.
How the bugs were found
The flaws came to light during a security review that used frontier AI models. The exact techniques weren't detailed, but the discovery underscores the growing role of advanced artificial intelligence in vulnerability research.
What the flaws mean for users
Hardware wallets are built to keep private keys offline, but a firmware bug can break that security. The two issues are rated as severe, meaning an attacker could potentially access funds or tamper with transactions. Anyone on an older firmware version is at risk.
No patch yet
BitBox hasn't released a fix or given a timeline for one. The company hasn't said when a corrected firmware will be available. Until then, users should check BitBox's official channels for updates and apply any new version as soon as it appears. For now, the safest move is to assume the vulnerability is real and act accordingly.
