We just released the Dixence security update.

During our internal audits, we were able to discover and fix multiple security issues in the BitBox firmware.

We recommend our users to update their BitBoxApp and device firmware through the BitBoxApp settings.

https://blog.bitbox.swiss/en/bitbox-08-2026-dixence-update/

As a hardware wallet user, one of the best ways to stay secure is to keep your wallet firmware up to date.

With AI models only getting better at finding and fixing bugs, expect regular updates for your hardware wallets in the near future.

https://blog.bitbox.swiss/en/firmware-updates-in-the-age-of-ai-staying-up-to-date-matters-more-than-ever/

If you own a hardware wallet, you probably spent the last few days wondering what you're actually able to check for yourself.

Short answer: more than you'd think.

Here are the questions worth asking any manufacturer (us included):

- Where does the randomness come from?

Every wallet begins as one large random number. If that number is predictable, nothing built on top of it holds.

Ask how many independent sources of entropy the device combines and what happens if one of them turns out to be weak.

- Can I check that the firmware on my device matches the published code?

Reproducible builds let you verify the binary you're running was built from the source you can read.

Worth being precise: that proves the binary matches the source. It does not prove the source is correct.

- Who approves a change before it reaches my device?

Ask whether one person can ship firmware alone, or whether every change needs a second set of eyes.

This is unglamorous and it is where most of the real security lives.

- What happens when they find a bug?

Every manufacturer ships bugs. The question is what the process looks like afterwards.

Ask about the bug bounty. Ask how quickly users were told the last time something was found.

OUR ANSWERS

- The BitBox generates your wallet from five independent sources of entropy: Physical noise from the secure chip, physical noise from the MCU, randomness provided by the host device, a static random number set in the factory and your own device password.

The benefit of mixing entropy: Redundancy. All but one source can be compromised and your seed would still be secure.

- The BitBox firmware supports reproducible builds you can independently verify yourself (link in the comments)

That way you know the firmware you install matches the public source code.

However, it is generally very difficult to verify what code is actually executed on-device.

- All change requests to the BitBox firmware require an approved review by a maintainer to be merged.

- The BitBoxApp and BitBox firmware are fully open-source and part of our bug bounty program (link in the comments )

Bug reports are financially rewarded depending on their severity, encouraging security researchers to actually take a thorough look.

- We announce security updates publically on our channels, including detailed information on the vulnerability and how it might have affected users.

Wallets created on a BitBox are not affected by the Coldcard RNG vulnerability. A BitBox seed combines five independent entropy sources. One weak source does not compromise the result.

More here:

https://blog.bitbox.swiss/en/bitbox-is-not-affected-by-the-coldcard-rng-vulnerability/

BitBox is not affected by the recent RNG vulnerability that affected one of our competitors.

More details coming soon.

Stay hydrated

Going somewhere? 🏝️

With the BitBox02 Nova you manage your savings straight from your phone, even on vacation;)

Sale season has begun

You can't control the market. You can own your keys.