Blockstream Jade Plus review: different by design

The blind oracle model, explained

Nearly every hardware wallet answers the question "how do you stop someone extracting the key from the chip" the same way: put the key in a certified secure element designed to resist physical attack. Jade answers it differently, and the difference is worth understanding before you decide whether you like it.

In the classic Jade design there is no secure element. Instead the seed is encrypted and split so that the device by itself does not hold enough to reconstruct it. The missing component is supplied by a server — the "blind oracle" — which participates in unlocking without ever learning anything about your key material. An attacker who steals your Jade and dismantles it does not find a seed, because a seed is not there in any usable form.

Whether this is better or worse than a certified chip is a genuine judgment call rather than a settled question. The secure element approach is well understood, has decades of adversarial testing behind it, and does not depend on any server existing. The blind oracle approach removes the "extract the key from the silicon" attack entirely — which is exactly the attack Ledger Donjon successfully mounted against Tangem's EAL6+ chip in 2026 — and introduces a dependency on Blockstream's infrastructure being available.

Our position: it is a legitimate design with a real argument behind it, and the fact that the whole thing is open source with reproducible builds means the claim is checkable rather than asserted. That last property is rare enough to be worth a lot.

Specifications

Maker	Blockstream
Price	US$149 for Jade Plus
Security model	No secure element — encrypted seed split with a blind oracle server component that has no knowledge of key material
Source code	Fully open with reproducible builds — you can rebuild and verify the binary
Connection	Camera-based QR codes for air-gap, or USB
Asset support	Bitcoin and Liquid Network
Display	Small colour screen with a camera
Backup	BIP39 recovery phrase, optional passphrase
Companion software	Blockstream Green, plus third-party wallets including Sparrow
Multisig	Supported
NZ availability	The Bitcoin Shop (Tauranga), Blockstream-authorised reseller
Last verified	September 2026

Reproducible builds: the underrated feature

Open source is necessary but not sufficient. Publishing your source code tells the world what you claim to be running; it does not prove that the binary on the device in your hand was compiled from that source.

Reproducible builds close that gap. If a build is reproducible, then anyone compiling the published source with the documented toolchain gets a byte-identical binary to the one the vendor ships — which means you can verify, rather than assume, that your device runs the code you read. It is the difference between a promise and a proof, and it makes an entire category of supply-chain compromise detectable.

Very few consumer devices offer this. Jade does, and it is the single strongest reason to take it seriously alongside considerably more expensive hardware. For a device that lands in New Zealand at around NZ$290 through a domestic reseller, it is a remarkable amount of verifiable assurance.

QR signing on a budget

Jade has a camera, which means it supports the same air-gapped signing workflow as the Keystone 3 Pro and the Coldcard Q at roughly half the price of either.

The flow is the same: your wallet software renders an unsigned transaction as a QR code, Jade's camera reads it, the device shows what you are signing on its own screen, and it returns a QR code containing the signature. No cable, no data path, nothing for a compromised computer to talk to. Jade also supports USB if you prefer, which the Keystone deliberately does not.

The limitation is the screen. Jade's display is small, and verifying a long Bitcoin address on it is more work than on a device with a larger panel. It is entirely doable and it is not a security failure, but it is exactly the kind of friction that leads people to check the first four and last four characters rather than the whole string — which is precisely what a clipboard-swapping attacker is counting on.