BitBox02 Nova: custody score 89%

BitBox (Shift Crypto) · Bitcoin-only or Multi · checked 2026-11-05. 76 of 85 points from sourced facts.

Score, input by input

Input	What we found	Points	Source
Supply chain and authenticity Genuine-device check	In the app: The BitBoxApp runs an attestation check with a key certified at the factory, every time you connect.	10/10	source
Supply chain and authenticity Official reseller list	Published: Official reseller list on bitbox.swiss (Where to buy).	5/5	source
Supply chain and authenticity Tamper evidence	Seal or resistance: Packaging checks before setup; BitBox says they can't rule out every physical modification.	3/5	source
Supply chain and authenticity Response to reseller incidents	No incident: None on record.	5/5	—
Key protection Secure element	Certified (EAL): Dual-chip design; the Nova's secure chip is EAL6+ certified.	6/6	source
Key protection Open firmware	Open, reproducible: Fully open-source firmware with reproducible builds.	9/9	source
Signing safety Own screen to check what you sign	Yes: Transactions are verified on the device screen and confirmed by touch.	15/15	source
Customer data exposure (36 months) Customer data	None found: No customer-data breach found for the last 36 months.	15/15	none found
Incident record (24 months) Security incidents	Flaw, no losses: Aug 17, 2026: firmware 9.26.5 fixed flaws BitBox called severe; no exploitation or losses reported.	8/15	source

Incidents

2026-08-17 Firmware 9.26.5 fixes severe flaws (memory corruption on unconfigured Multi devices; Silent Payments). No losses reported. source

Where to buy safely

Buy from the maker: shop.bitbox.swiss.
Resellers: Official reseller list on bitbox.swiss (Where to buy). source Its list names 61 shops in 32 countries (copied 2026-11-05); paste any shop into the reseller check.
On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. How to split vault, float and sweeps. Set up BitBox02 Nova as cold storage, step by step.

Questions

Is BitBox02 Nova safe?

BitBox02 Nova scores 89% on our custody score (76 of 85 points from sourced facts, checked 2026-11-05). Weakest point: Aug 17, 2026: firmware 9.26.5 fixed flaws BitBox called severe; no exploitation or losses reported.

Has BitBox (Shift Crypto) had a security incident?

Aug 17, 2026: firmware 9.26.5 fixed flaws BitBox called severe; no exploitation or losses reported.

Where should I buy BitBox02 Nova?

From the maker's store (shop.bitbox.swiss). Resellers: Official reseller list on bitbox.swiss (Where to buy). On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

Other hardware wallets, scored

OneKey Pro: 94%Blockstream Jade Plus: 79%Trezor Safe 5: 78%CoolWallet Pro: 72%Foundation Passport Prime: 66%Tangem Wallet: 66%Keystone 3 Pro: 54%Coldcard Q: 49%Ledger Flex: 49%

All hardware wallets, scored · Is this seller authorized? · How we score