Blockstream Jade

Jade by @Blockstream is an easy-to-use, purely open-source hardware wallet that offers advanced security for your Bitcoin and @Liquid_BTC assets.

[Blockstream Jade @BlockstreamJade]

Entire Jade lineup is safe.

Read how Jade generates entropy and recovery phrases: https://t.co/GqcK5mRjF3

[Blockstream @Blockstream]

The Blockstream Jade lineup (Jade Classic, Jade Core, and Jade Plus) is unaffected by the recently reported RNG issue with another company.

We are preparing a blog post outlining best practices for anyone moving bitcoin to a new wallet, including how to generate fresh keys, verify addresses, conduct a test transaction and securely retire an old recovery phrase.

Frontier LLMs are uncovering previously overlooked vulnerabilities, and Blockstream is using the same tools to strengthen the QA reviews of our product suite.

But AI is not a substitute for open source: transparent hardware and firmware enable independent scrutiny, faster disclosure and quicker fixes. This is why Blockstream Jade continues to champion both open source software and hardware.

[Blockstream Jade @BlockstreamJade]

DO NOT WAIT FOR YOUR SHIPMENT OF ANY HARDWARE WALLET TO ARRIVE

[Galaxy Research @glxyresearch]

🚨 A 3rd wave in what we suspect are hacks of Coldcard-generated addresses has been identified in which 207.7294 BTC has been drained.

Our estimated observed size of the Coldcard hack is now 1,367.05 BTC (~$88.6m) across 4,585 addresses.

More updates in the thread below 👇

[Blockstream Jade @BlockstreamJade]

@gustavojfe We're sorry. Higher volumes are causing issues for some customers.

The easiest way to buy with BTC is to buy Blockstream gift cards from @theBTCco or @fold_app.

This will also give you an extra 10% off.

Sorry for the inconvenience.

[Blockstream Jade @BlockstreamJade]

Adding 15% off all Jades.

Still retroactively applying expedited shipping to as many orders as possible.

[Blockstream Jade @BlockstreamJade]

Use code JADEPLUSEXPRESS for free expedited shipping.

We’re upgrading as many orders as possible to try and help.

https://t.co/PXp3iHAvyW

[Blockstream Jade @BlockstreamJade]

@MohrForYa Retroactively applying if possible. A lot of orders have picked and labeled already

[BTC Sessions 😎 @BTCsessions]

I am making myself available for one on ones to help handhold coldcard users through migrating funds to whatever is available to them. I will first make an explainer video, then start reaching out to those who reply here asking for help. It will be impossible to get on personal calls with everyone, but I will get to as many as I can.

Nathan @theBTCmentor has also been doing this tirelessly. We will call on the rest of our Mentor team to carve out time where they can as well. If you personally believe you'll need a hand after the explainer video let me know. I'll be checking back in as soon as I'm finished and uploaded. It may take a bit of time.

Until then, here are some options:
-move funds to any other hardware you have that isn't a Coldcard
-move funds to a hot wallet temporarily
-use updated coldcard firmware to generate a new key (probably my least favorite option at the moment), but Nathan did make an explainer video on this because it's a few extra steps

Back with more soon.

[Kevin Loaec 🧙‍♂️🐟 @KLoaec]

It's happening. Mk4, Mk5, Q are now actively drained.
Breaking an Mk4 is HARDER than breaking a weak passphrase, so your Mk3 "passphrase protected" are at immediate risk (if less or around 32 bits entropy).

[Kevin Loaec 🧙‍♂️🐟 @KLoaec]

PSA: the bad actors are on the move. In replies to my tweets this behavior is now very common:
- 'passphase are fine, it's fud'
- 'use {website} to check your passphrase entropy'

DO NOT ENTER YOUR PASSPHRASE ANYWHERE.
Even if you use a passphrase, move your funds, unless it was entirely generated out of good entropy (dice, cards).
Attackers are trying to buy time to grind more wallets.

[Blockstream Jade @BlockstreamJade]

Adding 15% off all Jades.

Still retroactively applying expedited shipping to as many orders as possible.

[COLDCARD @COLDCARDwallet]

Please treat this as urgent. Follow the advisory for your model, upgrade your device, generate a new seed, and carefully move your funds.

Help spread the word, especially to people who are less online and may not see this update.

[Blockstream Jade @BlockstreamJade]

Emotions and adrenaline are running high right now.

When this happens, scammers and phishing attempts get louder. Be extra careful this weekend.

The same rules as always still apply:
• Never type your recovery phrase into any website, form, “checker,” or tool
• No one legitimate will DM you first asking for seeds or offering to “help you migrate”
• Only use official communication channels and software you already trust

Slow down. Verify every step. A few extra minutes of caution is always worth it.

Look out for each other and try to rest. 🧡

[Blockstream Jade @BlockstreamJade]

@Laukess Yes. From Germany

[Zach Herbert 🇺🇸 @zherbert]

Don't throw out your Coldcard devices. If law enforcement can get the coins then your device will likely be needed to prove that you owned the seed.

(this is due to the hardware ID associated with the processor)

[Blockstream Jade @BlockstreamJade]

@sk8er1113 @HammerSeed21 https://t.co/EYPBrtDHWH

[Blockstream Jade @BlockstreamJade]

@HunnerSa @Blockstream How your entropy was generated, if you did not roll your own dice: https://t.co/GqcK5mRjF3

Our FOSS firmware: https://t.co/HoB0dDJmwf

[Cory 🦢 Real Bitcoin @ Swan.com @CorySwan]

https://t.co/GzX3ft8LhT uses two Blockstream Jade devices for the client's keys. Swan holds the third for you as a backup.

Jade code is fully open source under GPL3. Here is the repository:
https://t.co/SLSARX5mKd

Schematics, PCB designs, and related files are published in the repository’s hardware/ folder.

[Blockstream Jade @BlockstreamJade]

To Bitcoin community leaders worldwide:

Please message your Telegram, Signal, Discord, Nostr groups: anyone who created a recovery phrase on a Coldcard should migrate: fresh seed, generated on a new device.

If your community needs hardware wallets, get in touch. We're expediting onboarding and shipments for local communities: https://t.co/uvdxCWj9Ha

[Blockstream Jade @BlockstreamJade]

@HunnerSa You do not need to do anything

https://t.co/LTOBZ20ny3

[Blockstream Jade @BlockstreamJade]

Entire Jade lineup is safe.

Read how Jade generates entropy and recovery phrases: https://t.co/GqcK5mRjF3

[Blockstream Jade @BlockstreamJade]

@BitcoinGent @Trezor @Ledger @Coinkite https://t.co/LTOBZ20ny3

[Blockstream Jade @BlockstreamJade]

Entire Jade lineup is safe.

Read how Jade generates entropy and recovery phrases: https://t.co/GqcK5mRjF3

[Blockstream Jade @BlockstreamJade]

Use code JADEPLUSEXPRESS for free expedited shipping.

We’re upgrading as many orders as possible to try and help.

https://t.co/PXp3iHAvyW

[Blockstream Jade @BlockstreamJade]

@HunnerSa @Excellion @WeaponXBT Yes. Multiple sources. Article here: https://t.co/GqcK5mRjF3

Further explanation from 2023:
https://t.co/2qzDUdrsz2

[Blockstream Jade @BlockstreamJade]

@HunnerSa @Blockstream How your entropy was generated, if you did not roll your own dice: https://t.co/GqcK5mRjF3

Our FOSS firmware: https://t.co/HoB0dDJmwf