BitBox02 (Shift Crypto)

Skip to content What this pays sorona.xyz pays 1.25× the program's reward, up to +$1,000 per finding, plus a complexity bonus of up to $1,000 for especially complex or well-chained bugs. Finding │ Program pays │ Through sorona.xyz Discretionary, no published ceiling │ not published │ not published Submit a vulnerability CVE history 0 Last 12 months 1 Lifetime Memory safety 30 % Parsing/validation 30 % Auth bypass 25 % Info disclosure 10 % Latest advisories Loading the feed Overview BitBox02 is the leading Swiss hardware wallet and the main European alternative to Ledger and Trezor, with a device population in the low hundreds of thousands rather than the millions. Its importance is out of proportion to that unit count, for two reasons: bitbox02-firmware is one of the very few hardware-wallet firmware stacks that is fully Apache-2.0 down to and including the bootloader, which makes it a common reference and teaching implementation for embedded secure-element integration, and the same codebase ships in BitBoxBase and the Bitcoin-only firmware variant, so self-hosted node users depend on it as well as wallet users. The program is vendor-run rather than platform-run and is unusually researcher-friendly on everything except the money: it states plainly that it is prepared to protect a researcher's identity, publishes a three-business-day response commitment, and maintains a populated Hall of Thanks naming seventeen researchers. What it does not publish is a number. There is no severity table, no floor and no ceiling — the policy says only that "Rewards are based on the severity of the bug and at a level that we feel is reasonable" — so nothing here is rendered as a ceiling, because there is nothing to render. Payment is also gated on the fix actually shipping, denial of service and crash-only bugs pay nothing at all, and website vulnerabilities are excluded outright, which pushes the entire program onto the open firmware and the apps. sorona.xyz adds 1.25× on top of whatever Shift Crypto awards, up to $1,000 more, plus a complexity bonus of up to $1,000 for a well-chained finding. In scope Shift Crypto's own statement of scope: "The main areas are: Official code implementations in production that we maintain and make available at the BitBox GitHub repository. All Shift Crypto hardware." The same passage says information that significantly improves their security is rewarded, and names user and customer privacy as part of that bitbox02-firmware in full, the Apache-2.0 firmware for BitBox02 and BitBox02 Nova: the bootloader, the secure-chip interaction logic, the USB and HID transport, the encrypted host channel, the screen-confirmation flow and the coin-specific signing code The BitBoxApp desktop and mobile clients, the host side of every operation the device performs: pairing and attestation, backup and restore, address derivation and display, transaction construction and the update path Any other production code Shift Crypto publishes under github.com/BitBoxSwiss , which the policy names as the scope boundary rather than singling out one repository All Shift Crypto hardware, named in the policy in those words: the BitBox02 and Nova devices, the backup card and the Steelwallet product line Physical and fault-injection work against the devices themselves, since the hardware is in scope rather than only the code running on it User and customer privacy issues, which the policy calls out explicitly as rewardable rather than treating as a lesser class Out of scope Website vulnerabilities of any kind, which are excluded outright and push the whole program onto the firmware and the apps Denial of service and crash-only bugs, which pay nothing regardless of how reliably they reproduce Issues already public, or already known to Shift Crypto Third-party services the software connects to rather than the software itself Beta devices and end-of-sale products, which are out by default Most-valued findings Anything that extracts or reconstructs the seed or a private key off the device. That is the single guarantee a hardware wallet exists to make, and an Apache-2.0 firmware stack that includes the bootloader is auditable end to end, so the argument can be made completely rather than inferred. Transaction-display or signing mismatches where the screen shows one destination or amount and the device signs another, which defeats the airgap the product is bought for Bootloader and firmware-verification defects that let unsigned, altered or downgraded firmware run on the device, since every other guarantee sits on top of that check Authentication bypass on device unlock, the passphrase path or the secure-chip interaction logic: 25% of the expected mix and the route past mere physical possession Memory-safety and parsing defects in the USB, PSBT and message-handling paths reachable from a compromised host, which together are 60% of the expected mix; carry them through to a real impact, because a crash on its own pays nothing here Privacy failures that link a device, an address set or a user to an identity, which the policy names as rewardable in its own right Program rules Submit through sorona.xyz first. We validate, coordinate with the program's security team, and add the payout uplift on top of whatever it awards. Reports must arrive over PGP or another end-to-end encrypted channel No reward amount is published at any severity, the policy commits only to a level Shift Crypto feels is reasonable, so do not size your effort against a figure Payment is gated on the fix shipping, not on the report being accepted, which means your timeline is the firmware release cycle Denial of service and crash-only bugs pay nothing, and website vulnerabilities are excluded entirely Issues already public or already known to Shift Crypto do not qualify, and beta devices and end-of-sale products are out by default Anonymity is available if you want it: the program states it is prepared to protect a researcher's identity Disclosure Coordinated directly with Shift Crypto over an encrypted channel, with a published three-business-day response commitment and credit through the Hall of Thanks. Hold the detail until the firmware fix ships, which is also when payment is released. Safe harbor Sorona will not pursue legal action against you for good-faith research submitted to us in line with this policy. We cannot speak for the upstream project, its vendor, or any third party, and we do not grant authorization on their behalf. You are responsible for understanding and following the laws that apply to you, wherever you are, and for staying within any scope the project has defined. Submit a vulnerability