Compare / Blockstream Jade Plus vs COLDCARD Mk4 / Mk5
Blockstream Jade Plus vs COLDCARD Mk4 / Mk5: firmware, security track record & price
A side-by-side look at how often each device gets updates, how many of those were security-related, and what each costs at the official store today. Numbers come from each maker's own release notes and store pages.
| Blockstream Jade Plus | COLDCARD Mk4 / Mk5 | |
|---|---|---|
| Official price | $169 | $219 |
| Current firmware | 1.0.41 (Aug 22, 2026) | 5.6.3 (Sep 30, 2026) |
| Days since last update | 67 days | 28 days |
| Releases, last 12 months | 5 | 5 |
| Security-flagged releases, 12 mo | 2 | 2 |
| Incidents on record | 1 (worst: medium) | 1 (worst: critical) |
| Where release notes are published | Public changelog/releases on GitHub | Public changelog/releases on GitHub |
| Blockstream Jade Plus at Blockstream | COLDCARD Mk4 / Mk5 at Coinkite |
"Security-flagged" means the vendor's notes mention a vulnerability, CVE, security fix or hardening. More flagged releases can mean more issues, or simply more transparent notes, so read the linked notes before drawing conclusions.
Security incidents for either device
- medium Blockstream Jade 1.0.41: 'important security updates', all users urged to upgrade · Aug 22, 2026Jade firmware 1.0.41's changelog says the release contains important security updates and that all users should upgrade as soon as possible. It credits outside researchers for reported issues, adds stack protection and extra per-device entropy, and bumps the secure version to block downgrades.
- critical COLDCARD firmware bug produced weak seeds; funds stolen · Jul 30, 2026Coinkite's advisory says COLDCARD firmware released from 2021 to July 2026 had a bug that produced poor entropy during seed generation. Attackers regenerated the affected private keys offline and stole funds; the devices themselves were not remotely accessed.