According to CoinMeta, Bitbox released a firmware update that fixed two serious vulnerabilities. These vulnerabilities could have exposed hardware wallet users to the risk of malicious firmware or caused Bitcoin to be locked in unintended addresses. Bitbox stated in its security disclosure on Monday that the first vulnerability involved memory corruption affecting unconfigured versions of Bitbox02 and Bitbox02 Nova, while the second vulnerability affected the wallet manufacturer's silent payment feature. The company said that no evidence of these vulnerabilities being exploited was found, nor were there any reports of users losing funds due to them. Bitbox classified the first vulnerability as severe, as arbitrary code execution could undermine the protective measures designed to prevent unauthorized software from running on hardware wallets.