# Blockstream Jade Plus custody score: 79% | TradingAgentStack

> Blockstream Jade Plus by Blockstream: custody score 79% from sourced facts on supply chain, key protection, signing, customer data and incidents.

Canonical: https://tradingagentstack.com/custody/blockstream-jade/

1. [Home](https://tradingagentstack.com/)

2. [Custody](https://tradingagentstack.com/custody/)

3. Blockstream Jade Plus

# Blockstream Jade Plus: custody score 79%

Blockstream · Bitcoin and Liquid only · checked 2026-11-05. 67 of 85 points from sourced facts.

[Official store (store.blockstream.com) →](https://store.blockstream.com/)

## Score, input by input

| Input | What we found | Points | Source |
| --- | --- | --- | --- |
| Supply chain and authenticity Genuine-device check | In the app: Genuine Check: the Blockstream app verifies the Jade Plus was made by Blockstream when pairing. | 10/10 | [source](https://blog.blockstream.com/introducing-the-all-new-blockstream-jade-plus-simple-enough-for-beginners-advanced-enough-for-cypherpunks/) |
| Supply chain and authenticity Official reseller list | Not confirmed: Blockstream reported 30 official resellers worldwide (2023); we couldn't find a current published list. | 2/5 | [source](https://blog.blockstream.com/blockstream-quarterly-q2-23/) |
| Supply chain and authenticity Tamper evidence | None found: No tamper-evidence feature found in Blockstream's documentation. | 0/5 | none found |
| Supply chain and authenticity Response to reseller incidents | No incident: None on record. | 5/5 | — |
| Key protection Secure element | Virtual (server): No physical secure element: a 'virtual secure element' (blind oracle server) protects the encrypted seed. | 3/6 | [source](https://blockstream.com/jade/jade-plus/) |
| Key protection Open firmware | Open, reproducible: Firmware, schematics and companion app are open source, with reproducible builds. | 9/9 | [source](https://store.blockstream.com/pages/jade-plus-s) |
| Signing safety Own screen to check what you sign | Yes: 1.9-inch display to verify everything on the device. | 15/15 | [source](https://store.blockstream.com/product/blockstream-metal/) |
| Customer data exposure (36 months) Customer data | None found: No customer-data breach found for the last 36 months (a 2025 fake-firmware phishing campaign wasn't tied to Blockstream data). | 15/15 | none found |
| Incident record (24 months) Security incidents | Flaw, no losses: Nov–Dec 2025: firmware flaw that could expose the seed over USB or Bluetooth to malware on the host; fixed in 1.0.37/1.0.38, no known exploitation. | 8/15 | [source](https://blog.blockstream.com/jade-security-disclosure/) |

## Incidents

- **2025-12-17** Security disclosure: seed-exposure flaw over USB/Bluetooth fixed in firmware 1.0.37 and 1.0.38; no exploitation known. [source](https://blog.blockstream.com/jade-security-disclosure/)

## Where to buy safely

- Buy from the maker: [store.blockstream.com](https://store.blockstream.com/).

- Resellers: Blockstream reported 30 official resellers worldwide (2023); we couldn't find a current published list. [source](https://blog.blockstream.com/blockstream-quarterly-q2-23/)

- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

## Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. [How to split vault, float and sweeps](https://tradingagentstack.com/custody/#tiers). [Set up Blockstream Jade Plus as cold storage, step by step](https://tradingagentstack.com/cold-storage/).

## Questions

### Is Blockstream Jade Plus safe?

Blockstream Jade Plus scores 79% on our custody score (67 of 85 points from sourced facts, checked 2026-11-05). Weakest point: No tamper-evidence feature found in Blockstream's documentation.

### Has Blockstream had a security incident?

Nov–Dec 2025: firmware flaw that could expose the seed over USB or Bluetooth to malware on the host; fixed in 1.0.37/1.0.38, no known exploitation.

### Where should I buy Blockstream Jade Plus?

From the maker's store (store.blockstream.com). Resellers: Blockstream reported 30 official resellers worldwide (2023); we couldn't find a current published list. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

## Other hardware wallets, scored
[OneKey Pro: 94%](https://tradingagentstack.com/custody/onekey/)[BitBox02 Nova: 89%](https://tradingagentstack.com/custody/bitbox/)[Trezor Safe 5: 78%](https://tradingagentstack.com/custody/trezor/)[CoolWallet Pro: 72%](https://tradingagentstack.com/custody/coolwallet/)[Foundation Passport Prime: 66%](https://tradingagentstack.com/custody/foundation-passport/)[Tangem Wallet: 66%](https://tradingagentstack.com/custody/tangem/)[Keystone 3 Pro: 54%](https://tradingagentstack.com/custody/keystone/)[Coldcard Q: 49%](https://tradingagentstack.com/custody/coldcard/)[Ledger Flex: 49%](https://tradingagentstack.com/custody/ledger/)

[All hardware wallets, scored](https://tradingagentstack.com/custody/) · [Is this seller authorized?](https://tradingagentstack.com/custody/#reseller-check) · [How we score](https://tradingagentstack.com/custody/#method)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)