Blockstream: Jade Unaffected by Coldcard Randomness Vulnerability, Releases Firmware 1.41

Blockstream stated that Jade is not affected by the Coldcard random number generator vulnerability and has released firmware 1.41 following a wave of AI-assisted security reviews. Jade noted it has undergone dozens of automated AI scans and multiple manual reviews, focusing on sensitive areas such as random number generation and transaction signing. The new firmware strengthens stack protection, updates dependencies, audits sensitive memory clearing processes, and upgrades the Jade runtime environment. Blockstream said Jade's random number generation mechanism uses multiple entropy sources, including hardware chip noise, timing data, sensor data, and camera noise, mixed via SHA-512 to prevent a single entropy source failure from affecting seed generation. The team stated that other lower-severity findings are still being addressed, with firmware 1.42 expected to be released in a shorter development cycle.