Frostsnap fixes two security issues, releases v0.4.0 with new firmware downgrade protection

Odaily Planet Daily News Bitcoin multisig hardware wallet Frostsnap has released version v0.4.0, fixing two security issues with no user fund losses detected so far. First, a malicious signing request could mark a certain output as belonging to the user's wallet. The device did not verify this claim and would not display it on the confirmation screen, potentially allowing funds to be transferred to an address the user had never seen. Second, change addresses could fall outside the wallet's recovery scan range, causing funds to appear missing after backup restoration, although the relevant funds actually remained in the wallet. After the update, the app will prompt users to upgrade their device firmware and adds firmware downgrade protection. The Frostsnap team recommends that users update the app and firmware as soon as possible.