BitBox released firmware version 9.26.5 after AI audits identified two severe flaws and a bootloader issue. Exploitation required a phishing attack and a user unlocking a tampered device. BitBox said no user funds were stolen and wallet seeds were never at risk.