CryptoGuardzIndependent crypto register
Read the binding document, check it against the issuing register, publish the disagreement18+ · Gambling carries risk of loss

Choose a language

The register is published in these languages. If this page has no version in one of them, you go to that language’s home page.

Photo: Jason Dent / UnsplashWallet register · blockstream.com

Is Blockstream Jade safe? What its terms and incident record say

No score publishedLast reviewed 1 recorded incident
In short, from the documents

Is Blockstream Jade safe?

Blockstream Jade's terms disclaim custody but do not settle who holds key material. No party is disclosed as able to block an address. 1 primary-source incident is recorded. Its terms name no gambling rule. Liability is excluded for all loss. This answer reads documents; no code audit or test transaction was run.

Documents last checked Reviewed by CryptoGuardz Register Desk, editorial desk

Blockstream Jade (Blockstream app): keys held on a device you hold, or split between you and the provider. Not settled by the terms. Which applies depends on how the wallet is set up.Who holds the keysYouDeviceSharedProviderMarked: Device and SharedNot settled by the terms. Which appliesdepends on how the wallet is set up.Blockstream Jade (Blockstream app): who can block an address: none disclosed in the documents read.Who can block an addressNobodyProviderThird partyMarked: NobodyNone disclosed in the documents read.Blockstream Jade (Blockstream app): gambling clause: not disclosed, read 2026-10-07. The terms name no gambling rule, which is an absence, not a permission.Gambling clauseBannedSilentAllowedMarked: Silent, not disclosedThe terms name no gambling rule, which is anabsence, not a permission. Read 2026-10-07.Blockstream Jade (Blockstream app): 1 primary-source incident recorded.Incidents on record1incidentOnly incidents a primary source records.
Blockstream Jade (Blockstream app): keys held on a device you hold, or split between you and the provider; who can block an address: none disclosed in the documents read; gambling clause: not disclosed; 1 primary-source incident recorded. From its own terms, documents last checked . Not a rating. Drawn by the CryptoGuardz Register Desk from the record.

This page answers the short questions. The full Blockstream Jade entry quotes every clause behind them.

Disclosure: CryptoGuardz has no commercial relationship with Blockstream Jade (Blockstream app) and earns nothing if you install it. Every statement below is read from a document Blockstream Jade (Blockstream app) publishes or from a public record, and each carries the date it was read. Corrections go to the corrections page.

Blockstream Jade review: the documents

This is a review of the documents Blockstream Jade publishes, not a test of the product: no transaction was signed and no code audit was read. The contracting party named is Blockstream Corporation; on jurisdiction the record says: Not stated as incorporation. The custody position comes from the Blockstream Terms of Use, effective 16 January 2018, read 2026-10-07. The record quotes 4 clauses across 4 topics, and 2 sub-service clauses where the app hands a swap, purchase or staking to another party. Blockstream Jade's terms disclaim custody but do not settle who holds key material. No cloud or hosted backup is offered; recovery depends on the copy you keep. Liability is excluded for all loss. Its terms name no gambling rule. 5 points could not be verified and are listed below.

Has Blockstream Jade been hacked?

One incident is recorded, each from a primary source: a disclosure by the company, a public vulnerability register or a regulator. The descriptions are the record’s, unedited, with the date and the source.

Incident · blog.blockstream.com

Blockstream disclosed a vulnerability in Jade firmware 1.0.24 to 1.0.36: a missing size check on descriptor parameter data allowed malware on a connected host, with the device unlocked over USB or Bluetooth, to overwrite the stack and cause a crash or limited code execution. Fixed in 1.0.37, released 13 November, with anti-rollback protection added in 1.0.38. Blockstream reported no confirmed loss of user funds.

No confirmed loss of user funds related to this issue.

Date is the date of Blockstream's disclosure post.

Retrieved 2026-10-07.

An incident on this list is a disclosed event, not a verdict on the product today. The absence of other incidents is not proof that none happened.

Blockstream Jade support and scams

The official domain in the record is blockstream.com. The help pages this register read include Blockstream help centre, How does Jade protect my recovery phrase with a blind oracle and Blockstream help centre, What does Blockstream Green's multisig protect from. Type the domain yourself rather than following a link to it.

Real support never asks for a seed phrase. The recovery phrase restores the whole wallet on any device, so whoever is given it can move everything it controls, and no support agent needs it to answer a question. What Blockstream Jade stores, by the record: Nothing by Blockstream that can restore the wallet. The user keeps the 12 or 24 word recovery phrase. The default blind oracle holds part of the key that encrypts the wallet on the Jade device, not a backup of the phrase.

Support links reached from ads or direct messages are the commonest drain. A search ad, a reply to a public complaint or a direct message offers help, the link opens a page that looks like blockstream.com, and the page asks you to “validate” or “sync” the wallet by entering the phrase. Once it is typed in, the wallet is emptied and nothing in the terms gives a way back.

If money has already gone, the next message offering to get it back is the commonest second loss. The FBI, the FTC, the CFTC and the UK FCA warnings about it are quoted on crypto scam recovery: what is real.

What we could not verify

The gaps in this record, as the record states them. A point listed here was looked for and not confirmed; it is neither a finding for Blockstream Jade nor against it.

  • Whether any terms of service govern the Blockstream app or Jade specifically. The only terms linked are the 2018 website and store terms, which do not mention either product.
  • Blockstream Corporation's state of incorporation and registered address.
  • Whether Blockstream can refuse to co-sign a multisig transaction, and the timelock recovery path if its server is unavailable. The help article retrieved does not say; the linked article on how multisig works was not read.
  • What Blockstream's default Electrum or Esplora servers see when the app syncs. Not described in the privacy policy.
  • Buy, swap or Lightning service providers inside the app, if any. None is named in any document retrieved.

Analysis on Blockstream Jade and wallets

Coinbase vs Coinbase Wallet: a custodial exchange account and a self-custody wallet, and the Base app renameCoinbase is a custodial exchange account where crypto is "stored on the platform"; Coinbase Wallet is a self-custody app where Coinbase "never has access to your recovery phrase". The wallet's App Store notes called it Base app for months, and since version 30.11 say "We're now Coinbase Wallet."How to buy Solana in the US: which exchanges list SOL, what they charge, and what moving it to a wallet costsCoinbase, Kraken, Robinhood, PayPal and Gemini each list SOL on their own pages, read on 14 October 2026; Cash App's crypto disclosures cover bitcoin and stablecoins, not SOL. Buy fees follow each platform's general crypto schedule. On-chain, Solana charges 5,000 lamports per signature, and the refundable rent-exempt minimum is being cut by up to 90% in five steps from September 2026.How to send bitcoin to another wallet, and how to find a bitcoin wallet address, step by stepSending bitcoin means pasting the recipient's address, choosing the amount and fee, and signing. Coinbase's web flow has 6 steps and Trezor Suite's has 4. Addresses start with 1, 3, bc1q or bc1p. Mempool.space recommended 1 sat/vB on 14 October 2026, and bitcoin.org says a transaction "cannot be reversed".How to set up a bitcoin wallet, step by step from the Blockstream and Trezor guidesA self-custody bitcoin wallet is set up by installing the app, generating keys, writing down a 12 or 24 word recovery phrase and checking it. Blockstream's app guide lists 4 steps; Trezor says its hardware setup takes about 15 minutes and wipes the device after 16 wrong PINs.How to transfer bitcoin to Cash App: finding your address, on-chain vs Lightning, and the $10,000 weekly capTo transfer bitcoin to Cash App, open the Bitcoin tile, tap Deposit bitcoin and copy the address, which changes after every deposit. On-chain deposits are capped at $10,000 in any 7 days and Lightning at $999. Cash App takes BTC only.Ledger Nano X review from Ledger's own pages, specs, price, Ledger Recover and two incidentsThe Ledger Nano X lists at US$99 on Ledger's US shop, read 14 October 2026, with an ST33J2M0 chip rated CC EAL5+, Bluetooth 5.2 and a 5 hour battery. Ledger Recover is a paid, optional key backup. Ledger's 2020 customer-data breach and 2023 Connect Kit attack did not break the device; both fed theft through phishing and malicious signing.

Sources

Compiled by the CryptoGuardz Register Desk from the Blockstream Jade record, first published 2026-10-07, last reviewed 2026-10-07. Quotations are verbatim from the document named beside them. Corrections: corrections.