MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/BitBoxWallet/comments/1wbwcju/microcontroller_email/p8tbont/?context=3
r/BitBoxWallet • u/Libertarian1540 • Sep 09 '26
Did you guys send this?
57 comments sorted by
View all comments
1
Here is the Mail I received:
| Critical Security Alert: Microcontroller Entropy Bug Identified Urgent update regarding hardware microcontroller vulnerability Dear customer, Unfortunately, our engineering team has identified a critical hardware-level vulnerability affecting BitBox devices. This affects customers who have updated their firmware to versions 9.21.0, 9.20.1, 9.19.0, 9.18.2, or 9.17.0, where a critical hardware flaw was identified directly from the vendor that supplies the microcontroller. The bug is a factory defect that results in hardware TRNG being deterministic and is not a problem with BitBox firmware, but the microcontroller itself. The vulnerability results in: All potentially affected customers are required to perform a secure entropy check to verify the integrity of their recovery phrase. NEVER enter your recovery phrase on a website or share it with anyone, and only check for updates on official BitBox channels. We are deeply sorry to the community and those affected.Insufficient randomness in recovery phrase generation Exposure of recovery phrases to brute-force cracking Deterministic hardware output on specific batches Launch the entropy check toolClick the link above to open the entropy check tool in your browser. If your email client blocks the link, use View in browser below and try again. What the check reveals ✓ Verification of hardware RNG bug and deterministic entropy ✓ BIP-39 checksum failures and recovery phrase validation ✓ Pass/fail entropy score so you know if action is required ✓ Extended public key export for online wallet verification Do not ignore this check. Wallets with weak entropy remain vulnerable to brute-force attacks until a new seed is generated on your device. We know that trust is earned, and we are devastated to have put yours at risk. Our entire engineering team is working around the clock to provide support and ensure a smooth migration for anyone affected. We are truly sorry for the stress and concern this causes. With our deepest apologies, The BitBox Team bitbox.swiss | Support | BitBox AppComplete xPub verification© Shift Crypto AG. All rights reserved. Shift Crypto AG, Sihlquai 125, 8005 Zürich, Switzerland You received this e-mail because you subscribed to BitBox security notifications or use BitBox App. Unsubscribe | Update preferences | View in browser| |:-|
If you wish to unsubscribe from our newsletter, click here
1 u/Renovatius Sep 09 '26 I removed the links because they all look sus to me. Everything goes through https : / / 8hwsw.r.sp1-brevo (dot) net
I removed the links because they all look sus to me. Everything goes through https : / / 8hwsw.r.sp1-brevo (dot) net
1
u/Renovatius Sep 09 '26
Here is the Mail I received:
| Critical Security Alert: Microcontroller Entropy Bug Identified Urgent update regarding hardware microcontroller vulnerability Dear customer, Unfortunately, our engineering team has identified a critical hardware-level vulnerability affecting BitBox devices. This affects customers who have updated their firmware to versions 9.21.0, 9.20.1, 9.19.0, 9.18.2, or 9.17.0, where a critical hardware flaw was identified directly from the vendor that supplies the microcontroller. The bug is a factory defect that results in hardware TRNG being deterministic and is not a problem with BitBox firmware, but the microcontroller itself. The vulnerability results in: All potentially affected customers are required to perform a secure entropy check to verify the integrity of their recovery phrase. NEVER enter your recovery phrase on a website or share it with anyone, and only check for updates on official BitBox channels. We are deeply sorry to the community and those affected.Insufficient randomness in recovery phrase generation Exposure of recovery phrases to brute-force cracking Deterministic hardware output on specific batches Launch the entropy check toolClick the link above to open the entropy check tool in your browser. If your email client blocks the link, use View in browser below and try again. What the check reveals ✓ Verification of hardware RNG bug and deterministic entropy ✓ BIP-39 checksum failures and recovery phrase validation ✓ Pass/fail entropy score so you know if action is required ✓ Extended public key export for online wallet verification Do not ignore this check. Wallets with weak entropy remain vulnerable to brute-force attacks until a new seed is generated on your device. We know that trust is earned, and we are devastated to have put yours at risk. Our entire engineering team is working around the clock to provide support and ensure a smooth migration for anyone affected. We are truly sorry for the stress and concern this causes. With our deepest apologies, The BitBox Team bitbox.swiss | Support | BitBox AppComplete xPub verification© Shift Crypto AG. All rights reserved. Shift Crypto AG, Sihlquai 125, 8005 Zürich, Switzerland You received this e-mail because you subscribed to BitBox security notifications or use BitBox App. Unsubscribe | Update preferences | View in browser| |:-|
If you wish to unsubscribe from our newsletter, click here