r/BitBoxWallet

Our preliminary review of the phishing mail that was sent out to our newsletter subscribers about an hour ago found that it is very likely that our newsletter provider got compromised.

Multiple other Bitcoin companies got targeted as well, and it appears that we all share the same newsletter provider.

We sent out a phishing warning to all our newsletter subscribers, contacted the provider and reported the phishing domains. Most of the phishing links appear to have been taken down already.

We are still actively investigating this situation and will update you once we know more.

Find this post in X: [https://x.com/BitBoxSwiss/status/2097793026336981079](https://x.com/BitBoxSwi

Did you guys send this?

According to Ledger^0 (Slides^1), the security chip used inside of the Bitbox02 hardware wallet, was successfully attacked, as they were able to extract data.

The attack can only be operated physically on device and needs a lot of know how and the proper hardware to execute it, though I still would like to know, if you guys plan to release a new hardware in the future, where this issue is mitigated.

Also I couldn't find any information on your homepage, regarding this exploit, which I would've expected. Has the link changed or didn't you guys know of this exploit yet?

Thanks!

1. Can we use infinite passphrases (25th words) with BitBox02?
2. If yes, are they written on the device or on the PC connected to it (like on Trezor One)?
3. Is everything open source, or just some parts? Firmware, software, "secure element"?

Thanks!