BitBox 09.2026 Dixence update
This update includes important security improvements for the BitBox firmware as well as smaller bug fixes. And failure to update could result to withdrawal failures.
Get the latest BitBoxApp here: bitbox.swiss/download
During our internal audits, we were able to discover and fix security issues in the BitBox firmware. This update comes with several important security improvements for the BitBox firmware, among other smaller bug fixes and improvements.
TL;DR: This update fixes two severe vulnerabilities in the BitBox firmware, which were internally discovered by the BitBox team. There are no reports of stolen user funds and there is no reason for users to panic. We recommend all users to update their BitBox devices to the latest firmware version. Your existing wallet seed is not affected in any way.
Download BitBox firmware
As a BitBox user, all you have to do is update your firmware. Download the latest app version, plug in your BitBox and update to the new firmware version from the Manage device settings.
Download BitBox firmware
Click below to get the latest BitBoxApp from the official website. Firmware updates are installed through the app — from Manage device → Firmware.
Make sure you are on the official BitBox website bitbox.swiss when downloading. An easy way to avoid malicious search results or manipulated links is to click the update banner directly from inside the BitBoxApp you already have installed.
1. Official source only
I agree to download the BitBoxApp and firmware exclusively from the official website bitbox.swiss or via the in-app update mechanism. I understand that fake apps, search ads and manipulated links are common phishing vectors.
2. No recovery words
I acknowledge that BitBox will never ask for my recovery words, and I will never enter them anywhere other than directly on my BitBox device.
3. Update procedure
I understand that this update fixes security vulnerabilities described in the Dixence update announcement, and that my existing wallet seed is not affected by the update.
4. Risk acknowledgment
I understand that self-custody means I am solely responsible for the security of my funds, including keeping firmware up to date, verifying authenticity, and protecting my device password and recovery words.
5. Data & privacy
The BitBoxApp communicates with servers to fetch blockchain data and update information. No private keys or recovery words ever leave the device.
Am I affected?
- The BitBox02 on firmware versions2 through 9.26.1 may be affected if the user installs a malicious app bundled with malicious firmware.
- The Multi edition of the BitBox02 and BitBox02 Nova through firmware version 9.26.4 are affected if there is no wallet set up on the device yet and it's used with a malicious host device.
- The BitBox02 and BitBox02 Nova from firmware version 9.21.0 through 9.26.4 may be affected if the user created a transaction to a silent payment address together with a malicious host device.
- All BitBox devices on firmware versions from 9.26.5 are not affected.
Regardless of whether your device version and usage scenario may apply, we strongly recommend updating to the latest firmware version in any case.
Be mindful of attackers that may use security announcements like this one to inflict fear and uncertainty through phishing email campaigns. BitBox will never ask for your recovery words and you should never enter them anywhere other than directly on your BitBox.