Blockstream Jade Plus: custody score 79%
Blockstream · Bitcoin and Liquid only · checked 2026-11-05. 67 of 85 points from sourced facts.
Official store (store.blockstream.com) →
Score, input by input
| Input | What we found | Points | Source |
|---|---|---|---|
| Supply chain and authenticity | In the app: Genuine Check: the Blockstream app verifies the Jade Plus was made by Blockstream when pairing. | 10/10 | source |
| Supply chain and authenticity | Not confirmed: Blockstream reported 30 official resellers worldwide (2023); we couldn't find a current published list. | 2/5 | source |
| Supply chain and authenticity | None found: No tamper-evidence feature found in Blockstream's documentation. | 0/5 | |
| Supply chain and authenticity | No incident: None on record. | 5/5 | — |
| Key protection | Virtual (server): No physical secure element: a 'virtual secure element' (blind oracle server) protects the encrypted seed. | 3/6 | source |
| Key protection | Open, reproducible: Firmware, schematics and companion app are open source, with reproducible builds. | 9/9 | source |
| Signing safety | Yes: 1.9-inch display to verify everything on the device. | 15/15 | source |
| Customer data exposure (36 months) | None found: No customer-data breach found for the last 36 months (a 2025 fake-firmware phishing campaign wasn't tied to Blockstream data). | 15/15 | |
| Incident record (24 months) | Flaw, no losses: Nov–Dec 2025: firmware flaw that could expose the seed over USB or Bluetooth to malware on the host; fixed in 1.0.37/1.0.38, no known exploitation. | 8/15 | source |
Incidents
- 2025-12-17 Security disclosure: seed-exposure flaw over USB/Bluetooth fixed in firmware 1.0.37 and 1.0.38; no exploitation known. source
Where to buy safely
- Buy from the maker: store.blockstream.com.
- Resellers: Blockstream reported 30 official resellers worldwide (2023); we couldn't find a current published list. source
- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.
Keep it away from your bots
A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. How to split vault, float and sweeps. Set up Blockstream Jade Plus as cold storage, step by step.
Questions
Is Blockstream Jade Plus safe?
Blockstream Jade Plus scores 79% on our custody score (67 of 85 points from sourced facts, checked 2026-11-05). Weakest point: No tamper-evidence feature found in Blockstream's documentation.
Has Blockstream had a security incident?
Nov–Dec 2025: firmware flaw that could expose the seed over USB or Bluetooth to malware on the host; fixed in 1.0.37/1.0.38, no known exploitation.
Where should I buy Blockstream Jade Plus?
From the maker's store (store.blockstream.com). Resellers: Blockstream reported 30 official resellers worldwide (2023); we couldn't find a current published list. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.
Other hardware wallets, scored
All hardware wallets, scored · Is this seller authorized? · How we score