Sparrow Wallet releases version 2.5.4: AI-assisted code review fixes multiple security vulnerabilities

According to Decrypt, the privacy-focused Bitcoin wallet Sparrow Wallet has released version 2.5.4. Developer Craig Raw stated that this update was driven by AI-assisted code review, with most fixes stemming from this review.

The background of this review is the previous seed generation code vulnerability attack incident involving Coldcard, as well as the release of unrestricted AI models in China, which significantly enhanced the ability to search for vulnerabilities in large codebases. The main updates include: verifying the legitimacy of transactions returned by Electrum servers, strengthening security requirements for the BitBox02 hardware wallet (firmware version must be 9.4.0 or above), fixing local DNS leaks, and hiding sensitive credentials in debug logs. Raw indicated that no signs of exploitation were found, user funds are not at risk, but all users are still advised to update as soon as possible.