Two security developments, arriving within days of each other, are forcing a practical reckoning about how Bitcoin is stored and protected — and what happens when those protections fail or hold.
BitBox Found Something Serious
Swiss hardware wallet maker BitBox disclosed Tuesday that it discovered two severe vulnerabilities in its firmware, according to Bitcoin Magazine and Decrypt. One of the flaws would have allowed an attacker to extract funds from a device under specific conditions. No funds were taken. BitBox credited AI-assisted code analysis with surfacing the bugs before anyone else did, and it has released patched firmware.
The company is urging users to upgrade — but carefully, following its official instructions rather than rushing. That last word matters. Botched firmware upgrades have caused real losses in the past. If you use a BitBox02, check the company's blog directly for the verified update process before doing anything.
The broader point: hardware wallets are considered the gold standard for self-custody, but they are software products. Software has bugs. What makes this story notable is not just that a flaw existed — it's that AI tooling found it before attackers did. That's a meaningful shift in how security audits can work.
Bybit Puts Numbers on AI's Role in Recovery
Separately, Bybit — the exchange that lost $1.46 billion to North Korean hackers in early 2025 — announced that AI helped it recover or protect approximately $700 million in the aftermath, according to CoinDesk. Bybit describes itself as the first major centralized exchange to quantify that claim with actual figures.
The details matter here. Bybit's AI systems flagged suspicious withdrawal patterns and helped freeze or redirect assets fast enough to limit further damage after the initial breach. This is reactive security, not preventive — the hack still happened — but the scale of the recovery is significant. A year ago, many analysts assumed the full $1.46 billion was simply gone.
What These Two Stories Have in Common
They both point to the same underlying reality: AI is becoming a meaningful layer in Bitcoin security, both for individual custody tools and for institutional platforms. That's new. For most of Bitcoin's history, security relied almost entirely on human auditors and established cryptographic standards.
Neither story is a reason for panic. BitBox patched the flaw. Bybit clawed back nearly half its losses. But together they illustrate why custody decisions — where you hold Bitcoin, and how — deserve ongoing attention rather than a one-time setup choice.
The Broader Picture at $64,890
Bitcoin is trading at $64,890, holding a six-week range with notably low volatility, according to multiple sources including CoinDesk and VanEck research. Spot Bitcoin ETFs added $189 million on Tuesday, lifting August net inflows to $951 million, per Cointelegraph. Markets are watching Federal Reserve minutes due today for signals on interest rates. None of that changes the immediate security picture, but it does suggest a relatively stable environment in which to address custody hygiene — upgrade firmware, review where holdings sit, confirm backup procedures.
For anyone who holds Bitcoin on behalf of a cause or organization, the Bybit and BitBox stories are a useful reminder that custody infrastructure needs the same regular review as any other operational risk.