BitBox Finds Severe Firmware Vulnerability, Urges Upgrade

Hardware wallets sell themselves on the assumption that a compromised host cannot reach the keys, so a firmware flaw that could let attackers compromise the device cuts at the core of that promise. The fix matters less than the disclosure process: whether the upgrade path itself stays trustworthy, and whether other vendors treat this as a prompt to audit their own firmware, is the open question. For users, the practical tension is that the same upgrade channel is both the remedy and a thing worth being careful about.