Blockstream Jade review
Last reviewed 2026-08-25
Security warning
Blockstream Jade is the bitcoin-only option to look at if open hardware matters more to you than a certified chip, because Jade deliberately has no secure element. In its place Blockstream uses what it calls a blind oracle, an open source design it describes as a virtual secure element: the claim is that a locked Jade on its own holds nothing an attacker can extract, whether they are attacking over a cable or holding the device.
The line was reorganised on June 2, 2026 into three devices that share one firmware and one security model. Jade Classic at $79 is the original from 2021, with USB-C, Bluetooth, a color display and a camera. Jade Core at $99 is the plug-and-play device, aimed squarely at people who have coins on an exchange and have not moved them yet: plug in, pair, write down the recovery phrase, done. Jade Plus starts at $149, adds an aluminum body, an SD card slot and camera-based air-gapped QR signing, and is listed at $169.99 on Blockstream's own comparison page, so check the price on the model page before you order. All three pair with the Blockstream app on iOS, Android and desktop, and with Sparrow, Nunchuk, BlueWallet and Electrum.
One security episode is worth knowing in detail, because Blockstream handled it the way you want a vendor to. In early August 2025 the research group DARKNAVY reported a stack overflow in the register_descriptor call of Jade's CBOR interface, present since firmware 1.0.24. Blockstream confirmed the full report within 24 hours of receiving it in October, shipped 1.0.37 with the fix on November 13, 2025, released 1.0.38 a week later to block downgrades to vulnerable versions, and published a detailed disclosure on December 16, 2025. Exploiting the bug required malware already running on the computer or phone the Jade was talking to, users in QR-only mode were never exposed, and Blockstream says it found no sign of exploitation in the wild. Check that your device is on 1.0.38 or later.
On delivery, the store advertises free international shipping from North America and Germany and warns you may owe import fees. Its shipping policy names no countries, so there is no country list to publish here.
- Made by
- Blockstream
- Type
- Hardware device
- Price
- $99
- Runs on
- iOS, Android, Windows, macOS, Linux
- Who holds the keys
- self-custodial, keys protected by Blockstream's open source blind oracle rather than a secure element chip
- Bitcoin only
- Yes
- Screen
- 1.9 inch color LCD, 320 x 170 pixels
- Connectivity
- USB-C and Bluetooth on all three models; Jade Plus adds an SD card slot and camera-based QR signing
- Released
- 2021 for the original Jade; Core and Plus arrived with the June 2, 2026 lineup refresh
- Coin support
- Bitcoin only, with Lightning and Liquid handled through the Blockstream app
Pros and cons
What works
- Bitcoin only, with both firmware and hardware published as open source
- Three tiers from $79 to $149 sharing one firmware and one security model
- Genuine Check attestation lets you verify the device was actually made by Blockstream
- Jade Plus signs fully air-gapped over QR codes and reads an SD card
- Blockstream fixed the DARKNAVY report in three weeks and published a full public disclosure
What to watch
- No certified secure element, which is a deliberate tradeoff but still a difference from Ledger, Trezor and BitBox
- Firmware 1.0.24 through 1.0.36 carried a stack overflow that a compromised host could use to crash the device, and 1.0.35 and earlier could allow limited code execution
- Jade Core has no camera, so air-gapped QR signing needs the Plus
- Free international shipping is advertised with no country list behind it, and you may owe import fees
Worth comparing
- Foundation PassportBitcoin-only hardware from a US company, now sold as the $349 Passport Prime: keys, two factor codes, security keys and encrypted storage in one device.
- ColdcardBitcoin-only air-gapped signer whose seed generation was weakened by a build error from March 2021 until fixed firmware landed on July 31, 2026.
- BitBox02Swiss made, fully open source, sold in Multi and Bitcoin-only editions, with a Nova model that works from an iPhone.
Frequently asked questions
Does Blockstream Jade have a secure element?
No, and that is deliberate. Blockstream uses an open source design it calls a blind oracle and describes as a virtual secure element, arguing that a locked Jade holds nothing an attacker can take, whether they are online or holding the device.
Which Blockstream Jade should I buy?
Jade Core at $99 if you want the shortest path from an exchange into self-custody. Jade Plus from $149 if you want air-gapped QR signing, an SD card slot and a metal body. Jade Classic at $79 is still in production for the smallest budget.
Was my Jade affected by the DARKNAVY vulnerability?
Devices running firmware 1.0.24 through 1.0.36 were, but only through malware already running on the computer or phone the Jade was connected to. Blockstream shipped the fix in 1.0.37 on November 13, 2025 and blocked downgrades in 1.0.38, so upgrade to 1.0.38 or later.
Does Blockstream ship to my country?
Blockstream advertises free international shipping from North America and Germany and publishes no list of countries it will or will not ship to. Its shipping policy says only that you are liable for import duties and fees, so the checkout is the answer.