BitBox, a hardware wallet widely used among bitcoin users, has recommended an “immediate update” after fixing 2 major flaws in its firmware.

According to blockchain media outlet U.Today on Aug. 18, Dogecoin community figure Mishaboar (미샤보어) urged BitBox users to quickly upgrade their firmware.

The warning came after BitBox released the “Dixence” security update. BitBox said it identified several security problems in its firmware during an internal audit process and fixed them. The company explained that if the patched vulnerabilities were exploited, malicious firmware could be installed. It also said funds could be stolen after unlocking the device.

The attack scenario described by BitBox carries high risk because it could lead from installing malicious firmware to the actual theft of funds. An attacker could trick a user into installing tampered firmware, then unlock the device and ultimately access stored funds.

Security in the update process itself was also highlighted. Mishaboar urged users to first check whether the computer used to install firmware was infected with malware, given the nature of the vulnerabilities. If possible, he advised that it would be safer to carry out the update on a new computer or in a reset environment rather than on a previously used PC.

In a post on X, formerly Twitter, Mishaboar noted that BitBox does not support dogecoin, but it is a popular wallet among bitcoin investors. He stressed that anyone using BitBox should update the firmware immediately.

The issue again shows that even if hardware wallets are seen as an offline storage method, the firmware and the update route itself can be targeted. In particular, the explanation that an attacker could induce installation of malicious firmware is read as meaning that users should check the official app and the device status together. That has increased the need for BitBox users to inspect their existing PC environment as well.

We just released the Dixence security update. During our internal audits, we were able to discover and fix multiple security issues in the BitBox firmware. We recommend our users to update their BitBoxApp and device firmware through the BitBoxApp settings.…