{"id":10220,"date":"2026-10-12T12:04:30","date_gmt":"2026-10-12T05:04:30","guid":{"rendered":"http:\/\/10.10.10.5:4000\/shop\/?p=10220"},"modified":"2026-10-12T12:04:30","modified_gmt":"2026-10-12T05:04:30","slug":"blockstream-jades-security-update","status":"publish","type":"post","link":"https:\/\/bitcoinvn.io\/shop\/blockstream-jades-security-update\/","title":{"rendered":"Blockstream Jade\u2019s 2025 Security Update: Lessons for Bitcoin Self-Custody"},"content":{"rendered":"\n

In December 2025, Blockstream urged Jade owners to update their devices following the discovery of a vulnerability in older firmware. Alongside fixing the underlying issue, the company introduced an additional safeguard:<\/em> anti-rollback protection<\/em><\/strong>, designed to prevent devices from being downgraded to affected versions.<\/em><\/p>\n\n\n\n

The December 2025 security disclosure offers lasting lessons for anyone securing their own Bitcoin. Understanding firmware updates, recognizing fraudulent support messages and maintaining a reliable recovery backup remain essential parts of using a hardware wallet safely.<\/em><\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

Why Blockstream released the Jade security update<\/strong><\/h2>\n\n\n\n

Security researchers at DARKNAVY found a weakness in older versions of Jade\u2019s firmware – the software running inside the hardware wallet.<\/p>\n\n\n\n

If an affected Jade was connected and unlocked through USB or Bluetooth, malicious software on the connected computer or phone could potentially exploit that weakness. In the worst case, an attacker could steal the wallet\u2019s private keys – the secret information that allows someone to spend your Bitcoin.<\/p>\n\n\n\n

A hardware wallet is designed to protect your private keys even if your computer or phone is infected with malware. In this case, the weakness was in Jade\u2019s firmware, so fixing it required an update to the software running on the device.<\/p>\n\n\n\n

According to Blockstream\u2019s security disclosure<\/a>, version 1.0.37 fixed the problem<\/strong>.. Using Jade exclusively through QR codes did not expose it to this particular vulnerability.<\/strong><\/p>\n\n\n\n

At the time of disclosure, Blockstream reported no evidence that attackers had exploited the flaw and no confirmed loss of user funds<\/strong>. <\/p>\n\n\n\n

After fixing the vulnerability, Blockstream introduced anti-rollback protection in firmware 1.0.38<\/strong> to prevent the same weakness from being brought back. Once this protection is installed, Jade refuses to install affected older firmware\u2014even if someone tricks its owner into attempting the downgrade.<\/p>\n\n\n

\n
\"\"<\/figure>\n<\/div>\n\n\n

What should Blockstream Jade owners do today?<\/strong><\/h2>\n\n\n\n

The 2025 vulnerability was addressed through firmware updates, but keeping a hardware wallet secure requires ongoing attention. For Jade owners, a few practical habits remain useful:<\/p>\n\n\n\n