Blockstream Jade

Blockstream Jade compensates for the absence of a dedicated secure element using a Blind Oracle design. The seed is encrypted with keys split between the device and a remote PIN oracle operated by Blockstream. Neither the device nor the oracle alone holds enough information to reconstruct the seed, requiring an attacker to compromise both simultaneously. An offline mode is also available for users who prefer no server dependency.

When a PIN is entered on Jade, the device contacts a Blockstream-operated server to retrieve its share of the decryption key. The oracle only releases its share if the correct PIN is provided and the firmware passes remote attestation, confirming it has not been modified. The oracle never sees the actual PIN, Bitcoin addresses, or private keys — only a portion of an AES-256 encryption key. After too many failed attempts, the oracle permanently locks its key share.

In the standard Blind Oracle PIN model, an internet connection is required at wallet unlock — the device must contact Blockstream's server to complete PIN verification. An offline stateless mode is also available, which removes the server dependency but changes the security model. The Jade Plus model additionally supports fully air-gapped operation via QR codes with no USB data transfer required.

Yes. Both the hardware schematics and all firmware for Blockstream Jade are published under open-source licences on GitHub. Blockstream also publishes the oracle server code, making Jade one of the few hardware wallets where the entire stack — from PCB layout to firmware to the remote PIN server — can be independently audited. The open-source oracle code also means third parties could, in principle, run their own oracle.

No publicly confirmed security incidents or critical firmware vulnerabilities have been disclosed for Blockstream Jade. Blockstream publishes firmware release notes for all updates and maintains a security disclosure policy. The open-source nature of both the firmware and oracle server means the community can independently audit the codebase. No critical security advisories have been issued for the Jade platform to date.