Every recorded Blockstream security incident, newest first, with severity, fix status and sources.
A Jade on firmware 1.0.24–1.0.36, unlocked and connected to a compromised computer or phone or to a malicious web page, could be crashed or made to run limited code. Blockstream states users of its own app on a clean device were not at immediate risk and no users are known to be affected.
More entries do not mean a less secure brand: widely sold devices draw more published research and more targeted attacks, and some vendors disclose more than others.
WalletInsights. Hardware wallet security incident tracker. Last checked November 3, 2026. https://walletinsights.io/en/security-incidents/blockstream/
Vendors, researchers and readers can send corrections or statements to security@walletinsights.io. We check them against the sources, update the entry and record the change in its log.