Blockstream said its Jade hardware wallet is not affected by the Coldcard random number generator vulnerability and has released firmware 1.41 after extensive AI-assisted security reviews. According to ChainCatcher, the device underwent dozens of automated AI scans and multiple manual reviews, with attention focused on random number generation and transaction signing.
The new firmware adds stack protections, updates dependencies, audits sensitive memory-clearing processes, and upgrades Jade's runtime environment. Blockstream said Jade's random number generation uses multiple entropy sources, including hardware chip noise, timing data, sensor data, and camera noise, which are mixed with SHA-512 to reduce the risk that a single entropy source failure could affect seed generation.
The team said other lower-severity findings are still being addressed, and firmware 1.42 is expected to arrive on a shorter development cycle.