In December 2025, Blockstream urged Jade owners to update their devices following the discovery of a vulnerability in older firmware. Alongside fixing the underlying issue, the company introduced an additional safeguard: anti-rollback protection, designed to prevent devices from being downgraded to affected versions.
The December 2025 security disclosure offers lasting lessons for anyone securing their own Bitcoin. Understanding firmware updates, recognizing fraudulent support messages and maintaining a reliable recovery backup remain essential parts of using a hardware wallet safely.
Why Blockstream released the Jade security update
Security researchers at DARKNAVY found a weakness in older versions of Jade’s firmware – the software running inside the hardware wallet.
If an affected Jade was connected and unlocked through USB or Bluetooth, malicious software on the connected computer or phone could potentially exploit that weakness. In the worst case, an attacker could steal the wallet’s private keys – the secret information that allows someone to spend your Bitcoin.
A hardware wallet is designed to protect your private keys even if your computer or phone is infected with malware. In this case, the weakness was in Jade’s firmware, so fixing it required an update to the software running on the device.
According to Blockstream’s security disclosure, version 1.0.37 fixed the problem.. Using Jade exclusively through QR codes did not expose it to this particular vulnerability.
At the time of disclosure, Blockstream reported no evidence that attackers had exploited the flaw and no confirmed loss of user funds.
After fixing the vulnerability, Blockstream introduced anti-rollback protection in firmware 1.0.38 to prevent the same weakness from being brought back. Once this protection is installed, Jade refuses to install affected older firmware—even if someone tricks its owner into attempting the downgrade.
What should Blockstream Jade owners do today?
The 2025 vulnerability was addressed through firmware updates, but keeping a hardware wallet secure requires ongoing attention. For Jade owners, a few practical habits remain useful:
- Follow Blockstream’s current update instructions. Use the latest official firmware recommended for your device. If your Jade has been sitting unused, read the update guide before connecting and unlocking it. For a new Jade, Blockstream recommends updating before setting up your wallet.
- Check your recovery backup before any factory reset. Older devices may require additional reset steps. A factory reset erases the wallet from the device, so make sure your recovery phrase is correctly backed up before proceeding.
- Keep your companion app, computer and phone updated too. The Jade disclosure also highlighted the risks posed by malicious software on the device connected to your hardware wallet. Download wallet apps from their official sources.
- Be cautious with “urgent update” messages. Open Blockstream’s official website yourself to check the instructions. Never enter your recovery phrase into a website or companion app to complete a firmware update, and never share it with anyone claiming to be support.
Need further assistance with self-custody?
If you are looking to invest further in a professional self-custody setup, our experienced team at BitcoinVN Consulting offers paid, one-to-one consultations tailored to your specific needs and circumstances.
Our team is – by necessity – battle-tested. Operating our exchange service since 2014 has given us extensive practical experience in keeping digital assets secure. We must keep up with the rapidly changing threat environment and do maintain active close connections with peers across the cybersecurity sector.
Drawing on that experience, we can help you establish a self-custody strategy designed to avoid common, preventable mistakes that can lead to loss of funds.
Contact [email protected] to discuss your situation and arrange a consultation.
Looking to buy a genuine Blockstream Jade in Vietnam?
BitcoinVN Shop is an official Blockstream reseller in Vietnam, offering genuine Jade hardware wallets with nationwide shipping.
For those who prefer to avoid sharing a delivery address, you can arrange to collect your device directly from our Saigon HQ or through our Đà Nẵng showroom partner, ₿itCoffee.
Contact [email protected] to confirm availability and arrange your pickup.