Amber nodes are monitored by CommitWatch. Gray nodes are sampled from authenticated GitHub public commit search and may not represent complete contribution history.
This commit adds a new on-screen feature that lets a user view the raw secret key for an OTP (one-time password) account they already have stored on their Jade hardware wallet. It is a user-interface change, not a remote attack. The main s…
New UI path exposes raw OTP secret in plain text on device screenSecret is displayed using a local stack buffer marked with SENSITIVE_PUSH/SENSITIVE_POPFunction signature change widens data passed to QR activity from name-only to full OTP context
This commit adds a feature to Blockstream Jade hardware wallets that lets users display an OTP (one-time password) account's secret as a QR code on the device screen. The previous code had a placeholder 'Export is not implemented yet' mess…
New user-initiated OTP secret export via QR codeSecret URI loaded into memory and rendered as QRSENSITIVE_PUSH/SENSITIVE_POP used for URI and icon data
This commit adds a new intermediate menu screen for one-time password (OTP) entries in the Blockstream Jade hardware wallet. When a user views an OTP, they now see a menu with 'View' and 'Export' options. The 'Export' button currently just…
This commit adds a new feature to Blockstream Jade hardware wallets that lets the user export an extended public key (xpub) as a file to a connected USB storage device. The feature only works when the device is unlocked and explicitly disa…
New feature exposes xpub to external USB storage, increasing data-exfiltration surface if an attacker can trick the user into exporting or access the USB device afterward.Multisig is explicitly disabled for descriptor export, reducing scope.Liquid and Green multisig are noted as unsupported in the commit message.