ETH Zurich audits Bitwarden cryptography against malicious server scenarios

Bitwarden, LastPass, Dashlane (and 1Password somewhat). Paper: https://eprint.iacr.org/2026/058

Someone on Reddit says they reported some of those issues 4 years ago and they were ignored:

https://www.reddit.com/r/Bitwarden/s/LsJWCaQ6YD