Blockstream Jade Plus: what the sources say

The questions, with sources

"n/v" or "not verified" means we could not confirm it from a source we could read. Maker claims are marked as such. Confirm on the maker's site before you buy. Education only, not investment advice.

Five facts

• Jade Plus (launched 2025-01-03) lists at USD 149 for plastic and USD 169 for metal on the official store [source 1].
• Blockstream states Jade has no physical secure element and uses a 'virtual secure element' (blind oracle) with an ESP32-S3 microcontroller [source 5].
• Jade Plus has USB-C, Bluetooth, a camera for QR signing and SD/USB-drive firmware updates, and a 1.9 inch non-touch screen [source 1].
• Blockstream disclosed on 2025-12-16 a firmware issue reported by DARKNAVY, fixed in 1.0.37, and reports no confirmed loss of funds [source 12].
• The original Jade is now called Jade Classic (USD 79) and is described by Blockstream as still in production [source 2].

Audits

• No independent audit found in our search.

Publicly disclosed weaknesses

• 2025-12 Missing size check in the register_descriptor RPC (added in firmware 1.0.24) could crash the device or allow limited code execution via an unlocked device over USB/Bluetooth (QR mode not affected). Reported by DARKNAVY; affects Original Jade, Jade 1.1 and Jade Plus on 1.0.24-1.0.36; fixed in 1.0.37 (2025-11-13); 1.0.38 (2025-12-05) adds anti-rollback. Disclosed 2025-12-16. Funds lost: no. Fixed source
• 2023-02 Ledger Donjon (a research team of a competitor, presented at Black Hat USA 2022) used correlation power analysis on the ESP32 V3 chip to recover the key protecting the external-flash firmware, enabling firmware decryption and extraction of the device's keys used to talk to Blockstream's server; evil-maid scenario described. Reported to Blockstream and Espressif in 2021-10. Specific Jade models not named; Blockstream response not found. Funds lost: not verified. Fix status not verified source

Disclosed weaknesses are listed whatever their severity. "Funds lost" is what the sources say. "Fixed" means the source states a fix exists, which only helps if you update.

Incidents at the maker or its service providers

• 2026-09-06 Not a Jade incident: about 3,998 BTC were moved out of the federation wallet that backs Liquid Network's L-BTC, via a peg-out authorised through SideSwap's key and linked by Liquid officials to a bug in Elements. Blockstream paused Liquid activity. Neither source mentions Jade. Customer funds lost: not verified. Outcome: Bitcoin.com News reports about 3,400 BTC returned and about 598.5 BTC retained by the actors, who demanded a 10% bounty on 2026-09-09; Crowdfund Insider says the sidechain remained paused at its latest report and does not say whether L-BTC holders will be made whole. Status after these reports not checked. source

These affect the company or its customers and apply to every device of the brand. They are not weaknesses of this device.

Questions about Blockstream Jade Plus

Is Blockstream Jade Plus safe?

We do not give a yes or no, because safety depends on what you need to protect and on facts that change. We found 2 publicly disclosed weaknesses and 1 company incident in our search. Read the sources above before you buy.

Does Blockstream Jade Plus need an internet connection?

Signing happens on the device. How the device talks to your phone or computer depends on its connections: USB, Bluetooth, QR. The companion app or software that builds the transaction is online.

Who found the weaknesses listed for Blockstream Jade Plus?

The page names who disclosed each one when the source does. Several were found by a competing maker's research team or by independent security firms. We cite the affected company's own statement where we found one, and label press-only reports.

Where this comes from

• [1] Jade Plus - Blockstream store accessed 2026-10-11
• [2] The Jade Lineup, Reimagined - Blockstream blog (2026-06-02) accessed 2026-10-11
• [3] Blockstream Jade page (Plus vs Core) accessed 2026-10-11
• [4] Blockstream launches Jade Plus - press release (2025-01-03) accessed 2026-10-11
• [5] Jade security model FAQs - Blockstream Help Center accessed 2026-10-11
• [6] Blockstream Jade - WalletScrutiny (reproducibility) accessed 2026-10-11
• [7] Blockstream/Jade repository summary (third-party mirror) accessed 2026-10-11
• [8] Jade Advanced Functionality - Blockstream Help Center accessed 2026-10-11
• [9] Jade firmware v1.0.31 - NoBS Bitcoin accessed 2026-10-11
• [10] Jade issue #170 BIP39 passphrase handling - GitHub accessed 2026-10-11
• [11] Create a recovery phrase using dice - Blockstream Help Center accessed 2026-10-11
• [12] Blockstream Jade 1.0.38 Security Update (DARKNAVY disclosure, 2025-12-16) accessed 2026-10-11
• [13] Important Jade security update (anti-rollback, 2025-12-05) accessed 2026-10-11
• [14] Firmware extraction / evil maid attacks on Blockstream Jade - Ledger Donjon (2023-02-15) accessed 2026-10-11
• [15] Liquid Network suspends activity after federation wallet drained - Crowdfund Insider accessed 2026-10-11
• [16] Blockstream hackers demand 10% bounty - Bitcoin.com News accessed 2026-10-11
• [17] Blockstream Jade blog index accessed 2026-10-11
• [18] Blockstream USA Corporation - LEI record (Bloomberg) accessed 2026-10-11

Not verified: EUR price, warranty term, bug bounty, independent audits, Bitcoin-only firmware option, Blockstream app licence, FIDO/passkeys, Shamir and recovery service not verified. Firmware licence taken from a third-party repository summary because the official GitHub repo page could not be opened. Company entity/country comes from an LEI record for Blockstream USA Corporation and is not confirmed as the Jade seller. Several Help Center pages were available only as titles. Original Jade (now Jade Classic) USD 79 per Blockstream blog; its own spec sheet was not read. Ledger Donjon is a competitor's team; its finding is included as published research, Blockstream's reply not found.

See how we check. To report an error, use corrections and right of reply.