Kucoin BitBox02 Firmware 9.26.5 Addresses Three Security Vulnerabilities
Article Content
- •Firmware version 9.26.5 released on August 17, 2026, addresses three vulnerabilities.
- •No reports of stolen funds; existing recovery phrases remain valid.
- •Users must update devices running firmware versions up to 9.26.1 to mitigate risks.
On August 17, 2026, BitBox released firmware version 9.26.5, named Dixence, to address three security vulnerabilities in the BitBox02 and BitBox02 Nova hardware wallets. The manufacturer confirmed that no user funds were stolen and existing recovery phrases remain valid. Users are advised to update their devices and check which vulnerabilities may affect them. Two of the vulnerabilities were newly identified in this version, while the third was previously addressed in the July update. The update is crucial for devices running firmware versions up to 9.26.1, as these are the ones affected. The BitBox02 Nova is not impacted by the vulnerabilities. The article emphasizes the importance of not reacting hastily to security notices and provides guidance on the update process.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (4)
Following this threat?
Track BitBox in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
CVE-2015-3306 Exploited in ProFTPD FTP Servers CVE-2015-3306, a vulnerability in ProFTPD 1.3.5, allows remote attackers to read and write arbitrary files using the SITE CPFR and SITE CPTO commands. This exploit can lead to unauthorized access and potential remote code execution, as the commands are executed with the privileges of the ProFTPD service. Active… 
CISA Mandates Urgent Patching of Five Critical Flaws Exploited by Flax Typhoon The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch five critical vulnerabilities by October 11, 2026, following exploitation by the China-linked hacking group Flax Typhoon. The vulnerabilities, added to CISA's Known Exploited Vulnerabilities (KEV) catalog, include…