specter-diy firmware · Specter Desktop
Specter-DIY v1.10.5 fixes random number handling failure and weak change verification
In previous versions of Specter-DIY firmware, a hardware random number generator failure could be silently accepted as valid entropy, while transaction change was checked using metadata supplied by the computer without verification on the device itself — opening the way for a malicious host to substitute the change address. A warning check for mixing inputs from different wallets in one transaction, which had previously failed to trigger, was also restored. This affects Specter-DIY hardware wallet owners.
Actions to take
Update Specter-DIY firmware to v1.10.5 via SD card; if you are on v1.9.0 or earlier, install v1.10.3 first — it was a mandatory intermediate update.
Sources: