Blockstream Frames Jade Security After Wallet RNG Scare
Blockstream has released Jade firmware version 1.0.41 with new features, fixes and security updates, while addressing user concerns after the reported Coldcard random number generation fallout. The Jade firmware team says Jade is not affected by the Coldcard vulnerability and argues that its random number generation design avoids the specific failure path described in that incident. The post also shows how AI-assisted code scanning is changing the workload for hardware wallet security teams.Jade release lands during hardware wallet scrutiny
Blockstream’s Jade firmware version 1.0.41 arrives at a sensitive moment for Bitcoin hardware wallet users. The company links the release to a wider security discussion following what it describes as a recently exploited Coldcard random number generation vulnerability.The central message is narrow: Blockstream says Jade is not affected by that Coldcard issue. The company describes the Coldcard problem as a programming logic error that downgraded random number generation to a point where generated seeds could be enumerated by an attacker with sufficient computing power. Because seed generation is foundational to wallet security, any weakness at that stage can persist even if firmware is later updated.
For Jade users, the practical guidance is still conservative. Blockstream says users should upgrade to 1.0.41 as soon as they safely can, even while saying this release does not warrant an emergency alert across all communication channels.
Why Blockstream says Jade avoids the same RNG failure
Blockstream’s technical distinction is that Jade does not have a downgraded random number generation path to fall back to. The team says Jade obtains random numbers from internal hardware chip noise and mixes that with other entropy sources depending on the model.Those additional sources can include an internal cycle counter, timing jitter, internal sensor readings and camera noise. The system can also accept entropy supplied by host applications. Blockstream says these inputs are mixed with SHA512, the same hash function used by BIP32 to derive wallets from seeds, before part of the result is returned as random data and the remainder is used as the seed for the random generator.
That design claim matters because the Coldcard issue, as Blockstream describes it, concerned seed values becoming guessable after random number generation was weakened. Blockstream says multiple analyses of Jade’s random generator have confirmed its robustness and correctness, framing the design as defense-in-depth rather than dependence on a single entropy source.
AI code scans increase the security-report workload
The post also captures a broader shift in open-source security review. Blockstream says that after the Coldcard attack unfolded, some AI models were found to identify the bug when given Coldcard firmware source code, prompting many people and groups to run AI models over public hardware wallet code, including Jade.Blockstream says this expanded beyond hardware wallets into other parts of the Bitcoin ecosystem, including libraries, wallets and layer 2 projects. Because Jade client-side code is open source, the project was already receiving and acting on AI-generated reports, but the recent surge required more triage capacity and staffing.
The company says its teams analyzed every report for validity, duplicates, scope and severity before fixing issues where necessary. The useful implication is that AI scanning is not a replacement for review. It can create leads, but those leads still need human sorting, severity assessment and engineering judgment.
Firmware 1.0.41 focuses on hardening and fixes
Blockstream says version 1.0.41 fixes a number of reported issues and includes several security hardening measures. The release upgraded the runtime environment to the latest stable version, increased stack protection, updated dependencies and audited the clearing of sensitive memory regions.The team also says it improved automated tests, allowing issues to be found and fixed more quickly. According to Blockstream, these changes were implemented before the Coldcard incident as part of ongoing device security work, not as a direct emergency reaction to that event.
The company also says it has received dozens of AI automated scans of the Jade code and multiple additional human reviews, with attention on sensitive functions such as random generation and signing code. In most cases, Blockstream says suggested changes were aimed at improving defense-in-depth rather than correcting a single known catastrophic flaw.
Another Jade release is already planned
Blockstream says it has other, less serious reports that it expects to address in firmware version 1.0.42, likely on a shorter development time frame. That wording indicates a continuing review cycle rather than a single cleanup after one release.The team also distinguishes between ordinary update advice and serious security notification. It says bug reports can range from feature requests and user interface issues to functionality problems or issues potentially affecting device security. If a serious security issue is found, Blockstream says it will notify users to upgrade immediately across all communication channels.
For users, the immediate lesson is routine but consequential: hardware wallet firmware is part of an ongoing security process. Blockstream’s post recommends regularly checking for updates and applying them, not only for hardware wallets but also for applications, operating systems, routers and other connected devices.
Review process becomes part of the product story
Blockstream describes Jade development as starting with a four-eyes review of code changes before they are committed upstream. For sensitive areas, the company says all team members and in some cases external developers may be asked to review changes, while new features are audited before implementation for possible security concerns.Where a new protocol or cryptographic primitive is involved, the team says it asks Blockstream’s internal research team for a protocol review. Candidate branches are tested internally before public repository commits, with testing covering language and memory safety, bad-input handling, functionality, manual checks across device variants and both firmware builds.
The post also says Blockstream uses an internal AI scanning tool during development and scans for related bug classes when a flaw is found. That process description is significant because hardware wallet trust increasingly depends not only on device design, but on how teams handle disclosure pressure, automated reports and repeated review of high-risk code paths.
Conclusion
Blockstream’s message is both defensive and practical: Jade firmware 1.0.41 is a recommended update, but the company says Jade is not exposed to the specific Coldcard random number generation weakness described in its post. The release highlights stack protection, dependency updates, sensitive-memory handling and test improvements.The larger takeaway is that AI-assisted scanning is making open-source security review faster and noisier at the same time. For Bitcoin hardware wallet users, confirmed facts should be separated from forecasts or reassurance: this is a vendor’s technical account of its own product, and users still need to keep firmware current and follow official security notices.
Sources
Editorial Team - CoinBotLab