Bitcoin multi-signature hardware wallet Frostsnap fixes two security vulnerabilities, team urges users to update as soon as possible.

Bitcoin multi-signature hardware wallet Frostsnap has released version 0.4.0, fixing two security vulnerabilities, and confirmed no user funds have been lost so far. The two flaws are: FSA-2026-001: Malicious signature requests can mark a transaction output as belonging to the user’s wallet; the device does not verify this claim or display it on the confirmation screen, which could lead to funds being sent to addresses the user has never encountered. FSA-2026-002: Change addresses may fall outside the wallet’s recovery scan range, causing apparent missing funds after backup and recovery, though the funds actually remain in the wallet. After the update, the app will prompt users to upgrade their device firmware, and firmware downgrade protection has been added. The team advises updating both the app and firmware without delay.