To get the feature, you need to update. Here’s more information about the new release:

https://blog.bitbox.swiss/en/bitbox-09-2026-meggen-update/

You wanted Lightning inside the BitBoxApp for a long time. Here’s how it works:

https://blog.bitbox.swiss/en/introducing-lightning-in-the-bitboxapp/

Thank you, that means a lot.

Transparency has been part of how we work from the start. We'd rather publish the details and tell people exactly what to update than quietly patch and hope nobody notices.

Audits are only worth something if what they find gets out.

No, unrelated. That one was a random number generation problem in another vendor's device. These are issues in our own firmware, found during our internal audits: a bootloader exploit already fixed in July, a memory corruption bug on the Multi edition, and a silent payments implementation issue that could have locked funds at an unintended address. Different code, different companies. (You can read everything in the post)

Yes, user interaction was required.

The bootloader issue only works if the attacker first lands a successful phishing attack: the user has to be tricked into installing a fake BitBoxApp carrying manipulated firmware, then unlock the device to go through with it. High technical finesse on the attacker side, plus several deliberate steps on the user side.

It was already fixed in July with the Oeschinen release, firmware 9.26.2.

Nova is not affected, the bootloader versions involved are older than it.

The memory corruption issue we fixed now is a different one. It only applies to a Multi edition device with no wallet set up yet, plugged into a malicious host. Bitcoin-only is not affected, that code isn't in its firmware.