BitBox fixed severe firmware vulnerabilities that could have enabled malicious firmware installation and potential fund theft. The company said no user funds were reported stolen. BitBox urged users to update through the official BitBoxApp.