2026-08-04T09:37:04Z https://nostr.now BitBox https://nostr.now/npub1tg779rlap8t4qm8lpgn89k7mr7pkxpaulupp0nq5faywr8h28llsj3cxmt https://i.imgur.com/ziUXMu9.jpg https://i.imgur.com/ziUXMu9.jpg https://nostr.now/nevent1qqspfersc4gpc0v4hpzlsvpvxew9lm2g7gvz4zq69dptq0m4hlk29cczypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7m8zrez “What was that payment for again?” 🤔<br/><br/>Pizza with friends. A birthday gift. That thing you were sure you’d remember.<br/><br/>Add notes to your bitcoin transactions in the BitBoxApp, then find what you’re looking for with a simple search.<br/><br/>A few words today. Less guesswork tomorrow.<br/> <img src="https://blossom.primal.net/520d9764b944126b0f22ff2fd86449466a22239abceaa9127026c2a49791c2e3.png"> 2026-10-27T12:23:35Z https://nostr.now/nevent1qqszuem350xgrfg8xspnjdqxsufzu4t9a4w2wh5fh20fdmwc2x34euqzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7rnsdkg In reply to <a href='/nevent1qqsyr43gqxzmk537mhaa2304sklkpj3kdhwfrkdwwtvaukkdp84hvrspp4mhxue69uhkummn9ekx7mq3mdr6u'>nevent1q…dr6u</a><br/>_________________________<br/><br/>To get the feature, you need to update. Here’s more information about the new release:<br/><br/><a href="https://blog.bitbox.swiss/en/bitbox-09-2026-meggen-update/">https://blog.bitbox.swiss/en/bitbox-09-2026-meggen-update/</a> 2026-09-15T10:33:46Z https://nostr.now/nevent1qqsyfwu8enxrnuggqqt36decfdxsmzhfg72yvf0usl4xzszmtzcvm0czypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7rx42ry In reply to <a href='/nevent1qqsyr43gqxzmk537mhaa2304sklkpj3kdhwfrkdwwtvaukkdp84hvrspp4mhxue69uhkummn9ekx7mq3mdr6u'>nevent1q…dr6u</a><br/>_________________________<br/><br/>You wanted Lightning inside the BitBoxApp for a long time. Here’s how it works: <br/><br/><a href="https://blog.bitbox.swiss/en/introducing-lightning-in-the-bitboxapp/">https://blog.bitbox.swiss/en/introducing-lightning-in-the-bitboxapp/</a> 2026-09-15T10:33:15Z https://nostr.now/nevent1qqsyr43gqxzmk537mhaa2304sklkpj3kdhwfrkdwwtvaukkdp84hvrszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7mzj2ma Your hardware wallet doesn&#39;t need to come with you to pay for a coffee.<br/><br/>Lightning is now in the BitBoxApp. Public beta, for every BitBox user.<br/><br/>One backup. Both wallets.<br/><br/>More in the comments.<br/><br/> <img src="https://image.nostr.build/8969bcba29b95ee5eb468089fc01b35c241968e7bdc50bfc53c3b9f4daadbb6d.jpg"> 2026-09-15T10:32:35Z https://nostr.now/nevent1qqsg63u4e47p5nx49xalue45hwt3clj3tkunqscck6jr0jfth5d500czypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll797r9j6 Our preliminary review of the phishing mail that was sent out to our newsletter subscribers about an hour ago found that it is very likely that our newsletter provider got compromised.<br/><br/>Multiple other Bitcoin companies got targeted as well, and it appears that we all share the same newsletter provider.<br/><br/>We sent out a phishing warning to all our newsletter subscribers, contacted the provider and reported the phishing domains. Most of the phishing links appear to have been taken down already. <br/><br/>We are still actively investigating this situation and will update you once we know more. 2026-09-09T21:07:39Z https://nostr.now/nevent1qqsqwp9qhnyq5estdy0r538m7svw6xkd9p2es3h5es49wfl9uyrcvqszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7knq9av There is currently a phishing email going around that&#39;s pretending to come from us. <br/><br/>Please do not follow the instructions in the email. <br/><br/>We are currently investigating. 2026-09-09T20:16:48Z https://nostr.now/nevent1qqsf5c8qwmfgu24u38uf5hcrr5ayqme0dq9wwluqrl0tkfdz9z445ngzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7mrdu09 Can you still trust hardware wallets? <br/><br/>Our co-founder Douglas answered it properly: entropy sources, dice rolls, firmware updates, and the design decisions behind USB and Bluetooth.<br/><br/>Watch it here 👇<br/><br/><a href="https://www.youtube.com/watch?v=m6XBiIVIB1g&amp;t=44s">https://www.youtube.com/watch?v=m6XBiIVIB1g&amp;t=44s</a> 2026-08-31T13:35:44Z https://nostr.now/nevent1qqst6dce08apa5lxzs8glepkdsd5t9x8kn59jc2qyfm9ugr2hs8294czypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll76ce0lq Hi.<br/><br/>Every hardware wallet we sell can run the current firmware.<br/><br/>Bye.<br/><br/> <img src="https://image.nostr.build/8ae4eb42934fa722f53ae0645584064b307e2ed79b4f0a2bcc27d38e892612dc.jpg"> 2026-08-24T13:28:38Z https://nostr.now/nevent1qqsyyr786n43lz8tmpr8rtpww5y5wwhppffu05rzwusd5shn2ea4gzszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7sw5ucp In reply to <a href='/nevent1qqsy39age3xlfs9exaszd5yknuvc9d3mfa72lre0mtcp8q8cm2vqggqnuhg80'>nevent1q…hg80</a><br/>_________________________<br/><br/>Thank you, that means a lot. <br/><br/>Transparency has been part of how we work from the start. We&#39;d rather publish the details and tell people exactly what to update than quietly patch and hope nobody notices. <br/><br/>Audits are only worth something if what they find gets out. 2026-08-18T10:20:18Z https://nostr.now/nevent1qqsvt578kh3dh5snqsf8mja6kexz6ppvyjya77vn8kfpup6xng6vm5czypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll77ht2pn In reply to <a href='/nevent1qqs2gcg40ewczhratxzq3gxa9udmkettcnqh2d0ms3t6nvrkvqcmnfgm639xs'>nevent1q…39xs</a><br/>_________________________<br/><br/>No, unrelated. That one was a random number generation problem in another vendor&#39;s device. These are issues in our own firmware, found during our internal audits: a bootloader exploit already fixed in July, a memory corruption bug on the Multi edition, and a silent payments implementation issue that could have locked funds at an unintended address. Different code, different companies. (You can read everything in the post) 2026-08-18T10:17:59Z https://nostr.now/nevent1qqs8pk0tgt0aff805thsw52q57u798gawqpufxpzkz2dcypsnwf5wsczypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7ve2q8h In reply to <a href='/nevent1qqsv6752vxdmduel7el0tg5slwvp2aumr6ra4hqhpjpx690ux6w8grqtth0ma'>nevent1q…h0ma</a><br/>_________________________<br/><br/>Yes, user interaction was required. <br/><br/>The bootloader issue only works if the attacker first lands a successful phishing attack: the user has to be tricked into installing a fake BitBoxApp carrying manipulated firmware, then unlock the device to go through with it. High technical finesse on the attacker side, plus several deliberate steps on the user side.<br/><br/>It was already fixed in July with the Oeschinen release, firmware 9.26.2. <br/><br/>Nova is not affected, the bootloader versions involved are older than it.<br/><br/>The memory corruption issue we fixed now is a different one. It only applies to a Multi edition device with no wallet set up yet, plugged into a malicious host. Bitcoin-only is not affected, that code isn&#39;t in its firmware. 2026-08-18T10:15:55Z https://nostr.now/nevent1qqsfsce5k6h0qed2g56r4stfr50q3v75dmj9dlz7njrd2mngxp35afqzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll79jl8em We just released the Dixence security update.<br/><br/>During our internal audits, we were able to discover and fix multiple security issues in the BitBox firmware. <br/><br/>We recommend our users to update their BitBoxApp and device firmware through the BitBoxApp settings.<br/><br/><a href="https://blog.bitbox.swiss/en/bitbox-08-2026-dixence-update/">https://blog.bitbox.swiss/en/bitbox-08-2026-dixence-update/</a> 2026-08-17T16:37:19Z https://nostr.now/nevent1qqsz4ndtrmj42zjs8tv79r7vdm4cgdwmxzuegc5djp95zrgyejzz06szypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7udmdze As a hardware wallet user, one of the best ways to stay secure is to keep your wallet firmware up to date.<br/><br/>With AI models only getting better at finding and fixing bugs, expect regular updates for your hardware wallets in the near future.<br/><br/><a href="https://blog.bitbox.swiss/en/firmware-updates-in-the-age-of-ai-staying-up-to-date-matters-more-than-ever/">https://blog.bitbox.swiss/en/firmware-updates-in-the-age-of-ai-staying-up-to-date-matters-more-than-ever/</a> 2026-08-04T15:54:48Z https://nostr.now/nevent1qqsy46xncz89wxfes4526k4t5asxestw5yahzgyukwrqd8r7n5h0mzqzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7u9jg34 In reply to <a href='/nevent1qqszzu4dk92kwc2vpmku8djwqtpj8wrj0nqyz3zqlhdqpmfqhl7s7lspp4mhxue69uhkummn9ekx7mq8x0d7s'>nevent1q…0d7s</a><br/>_________________________<br/><br/>OUR BUG BOUNTY PROGRAM: <br/><br/><a href="https://bitbox.swiss/bug-bounty-program/">https://bitbox.swiss/bug-bounty-program/</a><br/><br/> <img src="https://image.nostr.build/35560e3bd1db4788a11f6170872380fb8afd1331fa3a766fd1337b3ae3a3656e.jpg"> 2026-08-04T09:32:04Z https://nostr.now/nevent1qqsdzra436v3ph4ycdv5zc5jygkn38j5x7mzv4678zaapyexctmalpqzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7qah7mq In reply to <a href='/nevent1qqszzu4dk92kwc2vpmku8djwqtpj8wrj0nqyz3zqlhdqpmfqhl7s7lspp4mhxue69uhkummn9ekx7mq8x0d7s'>nevent1q…0d7s</a><br/>_________________________<br/><br/>HOW TO INDEPENDENTLY VERIFY THE BITBOX FIRMWARE:<br/><br/><a href="https://blog.bitbox.swiss/en/how-to-independently-verify-the-bitbox02-firmware/">https://blog.bitbox.swiss/en/how-to-independently-verify-the-bitbox02-firmware/</a> 2026-08-04T09:30:42Z https://nostr.now/nevent1qqszzu4dk92kwc2vpmku8djwqtpj8wrj0nqyz3zqlhdqpmfqhl7s7lszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7uhz93l If you own a hardware wallet, you probably spent the last few days wondering what you&#39;re actually able to check for yourself. <br/><br/>Short answer: more than you&#39;d think.<br/><br/>Here are the questions worth asking any manufacturer (us included): <br/><br/>- Where does the randomness come from?<br/><br/>Every wallet begins as one large random number. If that number is predictable, nothing built on top of it holds.<br/><br/>Ask how many independent sources of entropy the device combines and what happens if one of them turns out to be weak.<br/><br/>- Can I check that the firmware on my device matches the published code?<br/><br/>Reproducible builds let you verify the binary you&#39;re running was built from the source you can read.<br/><br/>Worth being precise: that proves the binary matches the source. It does not prove the source is correct.<br/><br/>- Who approves a change before it reaches my device?<br/><br/>Ask whether one person can ship firmware alone, or whether every change needs a second set of eyes.<br/><br/>This is unglamorous and it is where most of the real security lives.<br/><br/>- What happens when they find a bug?<br/><br/>Every manufacturer ships bugs. The question is what the process looks like afterwards.<br/><br/>Ask about the bug bounty. Ask how quickly users were told the last time something was found.<br/><br/>OUR ANSWERS <br/><br/>- The BitBox generates your wallet from five independent sources of entropy: Physical noise from the secure chip, physical noise from the MCU, randomness provided by the host device, a static random number set in the factory and your own device password.<br/><br/>The benefit of mixing entropy: Redundancy. All but one source can be compromised and your seed would still be secure.<br/><br/>- The BitBox firmware supports reproducible builds you can independently verify yourself (link in the comments)<br/><br/>That way you know the firmware you install matches the public source code. <br/><br/>However, it is generally very difficult to verify what code is actually executed on-device.<br/><br/>- All change requests to the BitBox firmware require an approved review by a maintainer to be merged.<br/><br/>- The BitBoxApp and BitBox firmware are fully open-source and part of our bug bounty program (link in the comments )<br/><br/>Bug reports are financially rewarded depending on their severity, encouraging security researchers to actually take a thorough look.<br/><br/>- We announce security updates publically on our channels, including detailed information on the vulnerability and how it might have affected users. 2026-08-04T09:30:00Z https://nostr.now/nevent1qqs2na6ja9skwwgq486de6ktmdeaghwjdnf92qktqgrr9davgfdctmszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7crqe3u Wallets created on a BitBox are not affected by the Coldcard RNG vulnerability. A BitBox seed combines five independent entropy sources. One weak source does not compromise the result.<br/><br/>More here:<br/><br/><a href="https://blog.bitbox.swiss/en/bitbox-is-not-affected-by-the-coldcard-rng-vulnerability/">https://blog.bitbox.swiss/en/bitbox-is-not-affected-by-the-coldcard-rng-vulnerability/</a> 2026-07-31T10:51:17Z https://nostr.now/nevent1qqsppajrj0dudh24enzw5yu8aq2yt83wp4mz72z94vr2jvt0gtk4v0qzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7tpj0jp BitBox is not affected by the recent RNG vulnerability that affected one of our competitors.<br/><br/>More details coming soon. 2026-07-31T10:36:27Z https://nostr.now/nevent1qqs9n53lhdxsgafeahvu9m03vwzfv8yev6mjnqtthc7ru7rmgvrzgsqzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll74q9czh Stay hydrated<br/><br/> <img src="https://image.nostr.build/4b2e507dc1af0ebd4831c5b651945c35a1dd3b087e6393d7668e9b5955cc1794.jpg"> 2026-07-23T09:41:42Z https://nostr.now/nevent1qqsfg6cnhf8wswfczrkcthmkyvenf40epth6r37xzvl0g0j3y34yxsszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7srgk34 In reply to <a href='/nevent1qqs9qfmzwtg3c0vkghdwl5nvk2nrfr9t0ejevfgmwzt0thgdfe7s7wcpp4mhxue69uhkummn9ekx7mqkvpnz9'>nevent1q…pnz9</a><br/>_________________________<br/><br/>In the picture, the BitBox02 Nova Orange: <a href="https://shop.bitbox.swiss/en/products/bitbox02-nova-79/">https://shop.bitbox.swiss/en/products/bitbox02-nova-79/</a> 2026-07-20T07:46:57Z https://nostr.now/nevent1qqs9qfmzwtg3c0vkghdwl5nvk2nrfr9t0ejevfgmwzt0thgdfe7s7wczypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll72jzxfr Going somewhere? 🏝️ <br/><br/>With the BitBox02 Nova you manage your savings straight from your phone, even on vacation;)<br/><br/> <img src="https://image.nostr.build/55c316e07693bb8a41034237a017c2abfd1acb75f76abb1b038ef754285ae107.jpg"> 2026-07-20T07:46:12Z https://nostr.now/nevent1qqsdfzu9uqsm2es2r7q9t6x2qvckkyp7caft88qv3qqx4dva55knk3czypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7x4tjrc In reply to <a href='/nevent1qqs95050x2atc0hjg66ch5trwsgg28q50y90aazpfaax84dv4y7n3qqsj4uyc'>nevent1q…4uyc</a><br/>_________________________<br/><br/>❤️ 2026-01-23T07:56:00Z https://nostr.now/nevent1qqsydgetllumevw80h8pq4ysa3jkpc775algprfpsgtdnvcr0fln07gzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll72cpap8 Words reveal your model of reality.<br/><br/> <img src="https://image.nostr.build/51631d6ce6a71fa0c4b4c19c6e25a73ca98767fc5c5b80501b4c2e769885b3e4.jpg"> 2025-12-29T09:08:06Z https://nostr.now/nevent1qqsyzs6uva2yrhk2nu5w0wk833xydhspuj88w8tmqret5f4nspny6uczypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7jjdza2 May your days be calm, your food be amazing, and your bitcoin remain exactly where it belongs… in self-custody.<br/><br/> <img src="https://image.nostr.build/80352068a6370e6f883fee396b78b9175aaa4ab7c733783019f46cb23c8b9f84.jpg"> 2025-12-24T09:07:31Z https://nostr.now/nevent1qqsd45a7mhesu32unzykl98eydkk5zdqnktd8punlumtggdkmvezu7gzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7gnr68a In reply to <a href='/nevent1qqsdturneseupy9gxfzpk5fkkpgwngq6spmen2kflfh73uyamm3gdscxk2z5u'>nevent1q…2z5u</a><br/>_________________________<br/><br/>Enjoy! 🖤 2025-11-24T17:43:32Z https://nostr.now/nevent1qqsgy6uqpzjxlt5a5etqxazhpfdlcsrynwnppuu9td3kplepzrkfhjczypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7kgcxwy GM. We’re not the same<br/> <img src="https://blossom.primal.net/f23379989c7b4b971e07ad2feea5c2ff0e1a670d9cd7334739a69db90ceb19af.jpg"> 2025-10-22T07:07:56Z https://nostr.now/nevent1qqspghzz05au7q0vmlepremse34spjdw3t8l43gnghdntt34pzlmm2qzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7th354s For us, it&#39;s a no-brainer: wallet first. If you want your bike to be safe, you get a solid lock first.<br/><br/>But we get it, some see it the other way around. What do you think?<br/> <img src="https://blossom.primal.net/1c57ad8a054ec121b3d670d82d1c23a35d4656c585413a05ae159e243237c054.jpg"> 2025-10-02T10:40:59Z https://nostr.now/nevent1qqsyjzf7nsn09vfxarz9q5nh47crz4dmwgjfdt8wgl99n0aeac6dytczypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll72lgdkd Status is what they show you. Wealth is what no one can take from you.<br/> <img src="https://m.primal.net/RCiK.jpg"> 2025-06-26T08:35:11Z https://nostr.now/nevent1qqs9athu703zrxdfvldwdjc8ff6dkhzupfy3ptdc4hkrplrc4uykmqszypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7gkcwwj In reply to <a href='/nevent1qqsx96gd0ctffwmfxqhxa2gfftryhjpgnwekwjwj876m7qqdz55vmqg7yqdmz'>nevent1q…qdmz</a><br/>_________________________<br/><br/>You don’t. There an adapter for lightning! 2025-06-21T06:11:57Z https://nostr.now/nevent1qqsysgvdnmvxc33u4hkf33ggap82ml4puh959ztw4fqwgw7k46rn7tgzypdrmc50l5yaw5rvlu9zvukmmv0cxcc8hnlsy97vz3853cv7agll7sm6fg0 You just bought bitcoin? Congrats. Now do… nothing.<br/><br/>Ok, if you’re excited and want to check the price 10 times a day, fine. But here’s the truth: it doesn’t matter if it goes up or down this week. Your bitcoin should be like a digital piggy bank: untouchable.<br/><br/>You didn’t buy it to get rich tomorrow. You bought it to protect your time, your energy, your future.<br/><br/>Don’t trade it. Don’t stress. Don’t try to outsmart it.<br/><br/>Just hold. Let time do the work.<br/><br/> <img src="https://image.nostr.build/5d3e43c5b9c360365a6058f04730afa9bfc2a78c0dc264c8ae9d50609292db0c.png"> <br/> <img src="https://image.nostr.build/02374a14a8c7f1822ac36c1a8e87f893ec4d01a52828694f0f9ed5b9358c9ce6.png"> 2025-06-03T09:13:38Z