BitBox02 review
Last reviewed:
FlixoCrypt rating
Key facts
| Type | wallet-cold (Hardware Wallets) |
|---|---|
| Trading fees | Maker n/a · Taker Hardware purchase; in-app buy/swap via partners |
| Withdrawal | Network gas only |
| Pricing | BitBox02 ~€109; BitBox02 Nova ~€175 |
| KYC required | No |
| Regulated | No / limited |
| Supported assets | 1,500+ assets |
| Country availability | Global |
| Restricted regions | None listed |
| Affiliate commission | CPA · 10-15% per device sale (PLACEHOLDER — pending affiliate approval) |
| FlixoCrypt rating | 4.1 / 5 |
| Best for | Users who want a fully open-source, independently audited Swiss-made wallet and are diligent about installing firmware updates |
| Last verified | 2026-09-27 |
Overview
BitBox02, made by Switzerland's Shift Crypto, is a hardware wallet available in two editions sharing the same hardware: a Bitcoin-only edition that minimises attack surface, and a multi-edition supporting Bitcoin, Ethereum and ERC-20 tokens, Cardano, Litecoin and 1,500+ other assets. It uses an OLED display with invisible touch sensors, offers offline backup to microSD or a BIP-39 mnemonic, and includes FIDO U2F support for secure logins to services like Google and GitHub. Its firmware is fully open-source and has been independently audited. In 2026, security researchers and BitBox's bug-bounty programme found and the company patched several firmware vulnerabilities — including a USB buffer out-of-bounds write and a memory-corruption flaw — with no reported exploitation or fund loss. The newer BitBox02 Nova model adds iPhone support via USB-C. Compared with Ledger and Trezor, BitBox02 has a smaller user base and third-party ecosystem, but a strong track record of responsible, audited security research.
Availability
BitBox02 is available in: Global. Always confirm availability for your country on the official site, as regional support changes. Availability, regulation and tax treatment vary by country. Check your local laws before trading, and confirm current details on the official site. Regional note — India: Indian residents face 30% tax on crypto gains and 1% TDS on transactions above ₹50,000 per the Finance Act 2022.
Fees deep-dive
Like other hardware wallets, BitBox02 has no trading or subscription fees — only the one-time device purchase. The standard BitBox02 lists at roughly €109 and the newer Nova model, which adds a larger design and iPhone (USB-C) support, at roughly €175, both sold through Shift Crypto's own store. The companion BitBoxApp is free to download and use for sending, receiving and managing accounts, and third-party wallet software (e.g. Electrum, Sparrow) can also connect to the device at no extra cost. On-chain network fees for transactions are set separately by the user or connected software, not by BitBox itself. This puts BitBox02 in a similar price band to Trezor and below Coldcard, while undercutting Ledger's higher-end models.
Security architecture
BitBox02's security model rests on a secure chip for key storage, fully open-source and independently audited firmware, and a deliberately separated Bitcoin-only edition for users who want to minimise the amount of code running on their device. Backups are stored offline via encrypted microSD or an optional BIP-39 mnemonic, and the device uses touch sensors rather than physical buttons to resist certain side-channel and tampering attacks. Shift Crypto runs a public bug-bounty programme, which in 2026 surfaced multiple real vulnerabilities — a USB communication buffer flaw and a memory-corruption issue that could, in a worst case, allow malicious firmware to be installed on an uninitialised device connected to a compromised computer — both patched promptly with no reported exploitation. This pattern (independent researchers and bounty hunters finding issues, the vendor patching quickly, no confirmed losses) is what a healthy open-source security process looks like, though it does mean BitBox02 owners need to keep firmware genuinely up to date rather than assuming a device is safe indefinitely out of the box.
Pros
- Fully open-source firmware, independently audited by third-party security researchers
- Active public bug-bounty programme that has repeatedly caught vulnerabilities before real-world exploitation
- Separate Bitcoin-only and multi-asset (1,500+ coins) editions let users deliberately minimise attack surface
Cons
- Smaller ecosystem and third-party app support than Ledger or Trezor
- Several firmware vulnerabilities were disclosed and patched in 2026, requiring prompt updates to stay protected
- Touch-sensor-based interface has a learning curve versus a physical keypad or touchscreen
Who it is for
- Best for: Users who want a fully open-source, independently audited Swiss-made wallet and are diligent about installing firmware updates.
- Avoid if: You want the widest established ecosystem and third-party app support, or you're unlikely to keep firmware updated promptly.
Verdict
A well-engineered, fully open-source Swiss hardware wallet with a responsible disclosure and bug-bounty track record; 2026's patched vulnerabilities caused no known losses, but keep firmware current. A solid alternative to Ledger and Trezor, especially for users who value independent audits.
Alternatives
- Trezor — Similarly open-source with a longer track record and touchscreen models, but a narrower asset list on entry-level devices.
- Ledger — Broader third-party app ecosystem and 5,500+ assets, but closed-source firmware and a 2020 customer-data leak on record.
User reviews
Real reader reviews — separate from FlixoCrypt's own editorial rating above. Every submission is moderated before it appears here.
Loading reviews…
Write a review
Get notified if BitBox02 has a security incident
Related
BitBox02 FAQ
What is BitBox02? +
BitBox02, made by Switzerland's Shift Crypto, is a hardware wallet available in two editions sharing the same hardware: a Bitcoin-only edition that minimises attack surface, and a multi-edition supporting Bitcoin, Ethereum and ERC-20 tokens, Cardano, Litecoin and 1,500+ other assets. It uses an OLED display with invisible touch sensors, offers offline backup to microSD or a BIP-39 mnemonic, and includes FIDO U2F support for secure logins to services like Google and GitHub. Its firmware is fully open-source and has been independently audited. In 2026, security researchers and BitBox's bug-bounty programme found and the company patched several firmware vulnerabilities — including a USB buffer out-of-bounds write and a memory-corruption flaw — with no reported exploitation or fund loss. The newer BitBox02 Nova model adds iPhone support via USB-C. Compared with Ledger and Trezor, BitBox02 has a smaller user base and third-party ecosystem, but a strong track record of responsible, audited security research.
Is BitBox02 safe? +
BitBox02 is lightly regulated or non-custodial. In 2026, independent researchers (including CertiK) and BitBox's own bug-bounty programme found several firmware vulnerabilities, patched via the July 'Oeschinen' update (a buffer out-of-bounds write in USB communication) and an August update (a memory-corruption flaw that could allow malicious firmware installation on an uninitialised Multi-edition device connected to a compromised host, plus a Silent Payments-related issue on firmware 9.21.0-9.26.4). BitBox stated it received no reports of any of these being exploited or causing user fund loss. No confirmed theft or custody breach is on record. As with any platform, use strong security and only hold what you need on it.
Does BitBox02 require KYC? +
No — KYC is not required (non-custodial or minimal verification), which shifts custody and compliance responsibility to you.
What are BitBox02's fees? +
BitBox02 fees: maker n/a, taker Hardware purchase; in-app buy/swap via partners; withdrawals: Network gas only. Always confirm current fees on the official site, as crypto fees change often.
Is BitBox02 available in my country? +
Available globally, with some regional restrictions. Availability, regulation and tax treatment vary by country. Check your local laws before trading, and confirm current details on the official site. Regional note — India: Indian residents face 30% tax on crypto gains and 1% TDS on transactions above ₹50,000 per the Finance Act 2022.
What is BitBox02 best for? +
Users who want a fully open-source, independently audited Swiss-made wallet and are diligent about installing firmware updates.
When should you avoid BitBox02? +
Avoid BitBox02 if: You want the widest established ecosystem and third-party app support, or you're unlikely to keep firmware updated promptly.
What are the main pros and cons of BitBox02? +
Pros: Fully open-source firmware, independently audited by third-party security researchers; Active public bug-bounty programme that has repeatedly caught vulnerabilities before real-world exploitation; Separate Bitcoin-only and multi-asset (1,500+ coins) editions let users deliberately minimise attack surface. Cons: Smaller ecosystem and third-party app support than Ledger or Trezor; Several firmware vulnerabilities were disclosed and patched in 2026, requiring prompt updates to stay protected; Touch-sensor-based interface has a learning curve versus a physical keypad or touchscreen.
Is BitBox02 regulated? +
No / limited. Hardware vendor
When was this BitBox02 review last verified? +
This review was last verified on 2026-09-27 against the official site.
Reviewed by Arjun Mehta
Editorial lead overseeing FlixoCrypt's research, sourcing and verification process
Last verified:
Sources
- BitBox02 — official site — verified