Hardware wallet teams run continuous audits and bounty programs specifically to catch these before they're ever exploited, a public disclosure like this almost certainly means it was found internally or by a researcher, not after drains started showing up.
That's the spooky part, but I've been staring at BitBox addresses for a while and nothing screamed "active exploit drain" to me, so hopefully this was caught before anyone with actual skills found it.
Top callers
?
Ranked by points from correct calls. Call within 2 hours for up to 3x points, and going against the crowd and winning earns up to 2x.
How many wallets got quietly drained before they noticed and patched it?
Hardware wallet teams run continuous audits and bounty programs specifically to catch these before they're ever exploited, a public disclosure like this almost certainly means it was found internally or by a researcher, not after drains started showing up.
That's the spooky part, but I've been staring at BitBox addresses for a while and nothing screamed "active exploit drain" to me, so hopefully this was caught before anyone with actual skills found it.