Release notes:
- Fixed potential out of bounds write
- Bitcoin: improve security by disallowing silent payment and payment request addresses in send-to-self transfers
- Ethereum: improve security by checking chainID and warning if chainID is missing in a EIP-712 typed message
- Ethereum: reject invalid EIP-712 type and member names before signing
- Ethereum: reject large data streaming for transactions below the streaming threshold
Note:
When upgrading from a firmware with version v9.17.0 or below, you first must install and run firmware v9.17.1.
When upgrading from a firmware with version v9.26.1 or below, you first must install and run firmware v9.26.2.
The BitBoxApp automatically performs these steps.
Simulator:
This release contains a simulator executable. Its primary use case is integration testing.
Verify this release:
Please see the instructions here on how to reproduce this binary.
Alternatively, verify the signatures from the community to verify this build. See the instructions here on how to do so.
We welcome your signature confirming this build.
Verify the hash shown by the BitBox02:
The hash of the firmware as verified/shown by the BitBox02 at startup is:
- BitBox02 Bitcoin-only:
e6e14a9a555138df6fbd807f280c33dc81fc59261172477844e9385bab370fc4 - BitBox02 Multi:
d7858b3a0c210787b77f77fce610ecef09f7bfe11cb79bfcce9ab7c95b32f6e8 - BitBox02 Nova Bitcoin-only:
515519a6584a87d5002b9e27866e0f00e5d71721ef1182b3f48778e73fec5e6b - BitBox02 Nova Multi:
b5b332a2bb3159878d6495bb484d5af8adb81b863e0b920ee0abc08841b3bec6
See this documentation for more details about this hash.