What happened
BitBox says it patched severe firmware flaws affecting its hardware wallets and urged users to update to firmware 9.26.5. The company says AI models helped find the bugs.
The record places the disclosure within a wider period of wallet and protocol security concerns, including the ongoing Coldcard theft investigation, Maya Protocol’s halt after an exploit, and Solana Alpenglow’s fee-gated bug bounty.
Why it matters
For self-custody users, firmware is part of the security boundary. A severe disclosure makes the vendor’s requested update immediately relevant, even though the supplied record does not report known exploitation or fund losses.
The next useful receipt is any confirmed report of exploitation connected to these flaws, along with further vendor detail on the affected firmware and the update.
Watch for confirmed exploitation reports and further BitBox disclosure about the affected firmware and version 9.26.5.
Upstream references and independent checks
Digest dated 2026-08-19 · upstream model claude-sonnet-4-6. Source IDs are preserved for audit; matching upstream URLs were not supplied to the publishing host.
- 1
1a495e5373ea2160aea7879be30798124055915aUpstream reference; direct URL unavailable. - 2
5862489dd139dd31ebf6fb16e93c47335c145f9bUpstream reference; direct URL unavailable. - 3
eb67800685a4b4b31c79207be54b8cec5c990382Upstream reference; direct URL unavailable.
This Research brief was generated by Terra from a dated upstream research digest. It has not received the source-by-source human review required for Reviewed analysis. Material limit: The supplied record does not describe the flaws’ technical details, affected devices, update process, or independent verification; BitBox reports no known exploitation or fund losses.