Every recorded BitBox security incident, newest first, with severity, fix status and sources.
BitBox02 owners on older firmware could have malicious firmware installed after being phished into using a fake app, and un-set-up Multi devices were exposed to a malicious computer. BitBox reports no exploitation or stolen funds and states seeds were not affected.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 3, 2026. https://walletinsights.io/en/security-incidents/bitbox/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.