Bitbox02

Latest version: v6.3.0

Safety actively analyzes 688917 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 4 of 4

9.4.0

- ETHPubRequest api call now fails if a an invalid contract address is provided also if `display` is
false.
- Fix a memory leak (freeing a malloc'd string - no a functional or security issue)
- Title fixed when entering the 21st, 22nd and 23rd recovery word (was 21th, 22th, 23th) before.
- Verifiable seed generation: when restoring from 24 recovery words, for the 24th word, show all 8 candidate words which result in a valid checksum.
- Better error reporting on secure chip setup failures.
- Fix a rare touch issue resulting from failed calibration.
- Protection against the nonce covert channel attack when singing Bitcoin/Litecoin transactions (antiklepto protocol).

9.3.1

- Fix a bug where the device could freeze and become unresponsive.

9.3.0

- Enter multisig account name on the device if the name in BTCRegisterScriptConfigRequest is empty.
- Allow new keypaths: m/48'/coin'/account' for multisig, to enable compatibility with the Nunchuk wallet.
- Multisig script type and derivation keypath are now also verified during account regisration.

Bootloader

1.0.6

- Replace root pubkeys

1.0.5

- Add SSD1312 driver for new OLED screens

1.0.4

- Make bootloader mode more user-friendly and prompt for action on empty firmware

Page 4 of 4

© 2024 Safety CLI Cybersecurity Inc. All Rights Reserved.