Ongoing supply chain attack, be careful if you transact onchain. Thanks @BTC Sessions for the clarification 👍 #Bitcoin #NPM #hack #hacked View quoted note →

Electrum for the win!

So if I’m using Jade/Keystone with Sparrow and not their native apps, then I’m good?

I suppose you're safe, yes. You can surely confirm that on their twitter pages. Now if you're not in a rush, you can also wait 24-48h, get more info and watch the emergency fix being deployed everywhere.

https://store.blockstream.com/?code=KgD7dk4Ejmt6 Check out the official announcements from Blockstream and Jade: .

X (formerly Twitter)

Blockstream Jade (@BlockstreamJade) on X

Blockstream Jade is unaffected by the NPM supply chain attack targeting JavaScript packages. Always confirm the exact send and receive address on ...

.

X (formerly Twitter)

Blockstream (@Blockstream) on X

The Blockstream app does not use JavaScript or NPM. The Blockstream app and Blockstream Jade are unaffected by the ongoing NPM JavaScript supply c...

.

X (formerly Twitter)

Blockstream (@Blockstream) on X

@altinnerup Swift for iOS Kotlin for Android C++ and QML for desktop (Qt)

The Blockstream app and the Jade hardware wallet are NOT affected; the app does not use JavaScript environments or NPM packages. Instead, it is built with Swift (iOS), Kotlin (Android), and C++ with QML (desktop/Qt), completely avoiding this vulnerability that affects packages with billions of downloads and that can swap crypto addresses to steal funds. This means that users' funds remain completely safe. Jade is the Bitcoin-focused hardware wallet emphasizing transparency and isolation, compatible with apps like Blockstream Green for air-gapped transactions via QR codes. Fully open-source code/hardware for community auditing, true air-gapped operation (no USB/Bluetooth for signing), and native Liquid network integration for sidechain assets like L-BTC/USDt. Liquid is a federated Bitcoin sidechain second-layer solution designed for fast and private settlements, using confidential transactions to hide amounts and assets(However, the Blockstream Green Wallet has the option to route using Tor), and enabling the issuance of tokens. Unlike Lightning, it is not focused on instant micropayments, but rather on safer and more efficient movement of larger values.

https://store.blockstream.com/?code=KgD7dk4Ejmt6 Check out the official announcements from Blockstream and Jade: .

X (formerly Twitter)

Blockstream Jade (@BlockstreamJade) on X

Blockstream Jade is unaffected by the NPM supply chain attack targeting JavaScript packages. Always confirm the exact send and receive address on ...

.

X (formerly Twitter)

Blockstream (@Blockstream) on X

The Blockstream app does not use JavaScript or NPM. The Blockstream app and Blockstream Jade are unaffected by the ongoing NPM JavaScript supply c...

.

X (formerly Twitter)

Blockstream (@Blockstream) on X

@altinnerup Swift for iOS Kotlin for Android C++ and QML for desktop (Qt)

The Blockstream app and the Jade hardware wallet are NOT affected; the app does not use JavaScript environments or NPM packages. Instead, it is built with Swift (iOS), Kotlin (Android), and C++ with QML (desktop/Qt), completely avoiding this vulnerability that affects packages with billions of downloads and that can swap crypto addresses to steal funds. This means that users' funds remain completely safe. Jade is the Bitcoin-focused hardware wallet emphasizing transparency and isolation, compatible with apps like Blockstream Green for air-gapped transactions via QR codes. Fully open-source code/hardware for community auditing, true air-gapped operation (no USB/Bluetooth for signing), and native Liquid network integration for sidechain assets like L-BTC/USDt. Liquid is a federated Bitcoin sidechain second-layer solution designed for fast and private settlements, using confidential transactions to hide amounts and assets(However, the Blockstream Green Wallet has the option to route using Tor), and enabling the issuance of tokens. Unlike Lightning, it is not focused on instant micropayments, but rather on safer and more efficient movement of larger values.

I know Jade and please don't spam my comments with X and referral links. Thanks