BitBox02

BitBox02 uses a dual-chip architecture: an ATECC608A secure element for key protection and a separate STM32 microcontroller for application logic. Neither chip alone can reconstruct the seed. The firmware is fully open source with reproducible builds — users can compile from source and verify the resulting binary matches what runs on their device. Multiple independent external security audits have been published. No confirmed security incidents have been reported.

BitBox02 is available in two editions. The Bitcoin-only edition supports Bitcoin exclusively and has a smaller, more auditable firmware codebase. The Multi edition adds support for Ethereum, ERC-20 tokens, and a small number of other assets. The Bitcoin-only edition is generally recommended for users who only hold Bitcoin, as the reduced firmware scope lowers the attack surface. Both editions share the same hardware architecture and secure element.

Yes. BitBox02 firmware supports reproducible builds, meaning users can compile the source code and verify that the resulting binary matches the official release. This is a stronger transparency guarantee than simply publishing source code — it eliminates the possibility of the build pipeline introducing undisclosed modifications. Build verification instructions are published by Shift Crypto alongside each firmware release.

Yes. Shift Crypto has published the results of multiple independent third-party security audits covering the BitBox02 firmware and hardware architecture. Audit reports are available on Shift Crypto's website. The open-source and reproducible-build design means any researcher can also perform their own review without waiting for a commissioned audit.

No publicly confirmed security incidents or critical firmware vulnerabilities have been disclosed for BitBox02. Shift Crypto maintains a public security disclosure policy and publishes firmware release notes for all updates. Responsible disclosure of any significant vulnerability would result in a public security advisory, and none have been issued for BitBox02 to date.