Blockstream says Jade hardware wallets unaffected by RNG vulnerability

Blockstream said its Jade line of Bitcoin hardware wallets is not affected by a recently disclosed random number generator, or RNG, vulnerability reported at another company. The company said Jade Classic, Jade Core and Jade Plus are all unrelated to the flaw. Blockstream also said it is preparing a blog post outlining best practices for users moving Bitcoin to a new wallet, including generating new keys, verifying addresses, making a test transaction and securely disposing of an existing recovery phrase. In addition, the company said frontier large language models, or LLMs, are uncovering vulnerabilities that had previously been missed, and Blockstream is using them to strengthen product quality assurance reviews. Still, it stressed AI cannot replace open source, as independent verification and the rapid disclosure and patching of vulnerabilities require transparent hardware and firmware. Earlier, an attack exploiting a key-generation flaw in Coldcard hardware wallets stole 594 BTC, worth about $38 million, from around 500 wallets.