The Jade Plus makes a strong opening argument: it is fully open source, top to bottom. Blockstream publishes the hardware and firmware, and famously you can assemble a compatible Jade from off-the-shelf parts. For people who believe verifiability is the foundation of trust, that openness is the headline feature, and it is not marketing fluff — it is a genuine, auditable commitment that most competitors only partially match.
In daily use it is pleasant and capable. The built-in camera is one of the better QR scanners on the market, which makes air-gapped signing fast rather than fiddly. You also get USB, Bluetooth and microSD, so it slots into almost any wallet workflow. The Plus adds a bigger, nicer screen and a more premium feel than the original. At roughly $149 — with the base Jade Core cheaper still — the value proposition is excellent on paper.
The part that demands honesty is the security architecture. Unlike Coldcard or Passport, the Jade does not use a dedicated secure element. It runs on a general-purpose ESP32-S3 microcontroller. To compensate, Blockstream designed the 'blind oracle': your wallet encryption is split between your PIN, the device, and a remote oracle server that never learns your PIN, keys or addresses. It functions as a virtual secure element, and critically you can run your own oracle (for example on Umbrel) or operate the device in a stateless mode with no oracle at all.
That design is genuinely clever, and it is the reason Jade can stay fully open — secure-element silicon is proprietary, so avoiding it is what buys the openness. But the trade-offs are real and worth stating plainly. Lean on the blind oracle and you introduce an availability and privacy consideration (mitigated, though not eliminated, by self-hosting). Run fully stateless and you shed some of the physical-attack resistance the oracle provides. There is no free lunch; there is a choice you should make deliberately.
The ESP32 lineage also carries baggage. General-purpose MCUs of this class have a documented history of voltage-glitching and fault-injection attacks going back to Black Hat research, and security researchers have published evil-maid firmware-extraction work specifically against Jade-class hardware. Separately, a firmware-level vulnerability in the CBOR 'register_descriptor' path was responsibly disclosed and patched. None of this means Jade is broken — Blockstream has responded with updates — but it does mean physical security here is a moving target that depends on you keeping firmware current.
We land at 4.0. The Jade Plus is a legitimately great open-source wallet at a great price, and for a threat model centered on remote attackers and everyday use it is more than sufficient. It loses points only against the strictest physical-security bar, where a dedicated secure element and a simpler trust story win. Buy it if openness and value are your priorities and you are willing to understand the oracle model; look elsewhere if you want a secure element and zero homework.