Digital Wallet
By Sydney TheCMO
1 / 15
Two Severe Flaws, Different Targets. The first critical flaw sits in the bootloader. Under certain conditions, an attacker could use a…
2 / 15
How to Update Without Getting Phished. BitBox's instructions are specific. Download the official BitBoxApp from the official site — not…
3 / 15
What BitBox Says About Exploits. BitBox has not reported any thefts connected to these vulnerabilities.
4 / 15
BitBox just dropped an urgent firmware update for its BitBox02 hardware wallets. The update, named Dixence, patches several security flaws — two of them severe — and Dogecoin…
5 / 15
Mishaboar posted the alert on X, urging users to update their firmware right away. His advice went a step further than BitBox's own guidance: do the update from a clean or…
6 / 15
The first critical flaw sits in the bootloader. Under certain conditions, an attacker could use a fake BitBox app to push malicious firmware onto the device.
7 / 15
The second severe vulnerability targets the Multi edition specifically. It could trigger when an unconfigured device connected to a compromised computer — memory corruption…
8 / 15
A third issue rounds out the Dixence patch, and it's a different kind of problem. It's tied to silent payments. Unlike the first two flaws, this one can't directly steal funds.
9 / 15
BitBox's instructions are specific. Download the official BitBoxApp from the official site — not from an email link, not from a social media post, not from anywhere else.
10 / 15
The phishing risk here is real. Attackers know that security alerts like this one create urgency, and urgency makes people click on things they shouldn't.
11 / 15
Read also: BitBox Patches Two Critical Firmware Flaws Before Any Funds Were Lost
12 / 15
Mishaboar's clean-computer recommendation builds on that. Even with the right app and the right firmware file, a compromised machine could interfere with the process.
13 / 15
BitBox has not reported any thefts connected to these vulnerabilities. No confirmed exploitations, no known victims.
14 / 15
Users should also check their recovery words are still private and haven't been shared or stored anywhere insecure.
15 / 15
Hardware wallets carry a reputation for being the gold standard in crypto storage, and they mostly earn it. But Dixence is a reminder that "offline" doesn't mean "invulnerable.
The Currency Analytics
Want the full story?