Blockstream calls Jade firmware 1.0.41 a recommended security update
In its quarterly report, Blockstream says Jade firmware 1.0.41 shipped in August and fixes issues found through dozens of AI-assisted scans and human reviews of the Jade code. The Jade firmware developers recommend upgrading as soon as it can be done safely. The report does not disclose details of the flaws. The company says Jade itself was unaffected by the security incidents of the quarter. It also says firmware 1.0.42, with fixes for less serious findings, is on a shorter development timeline.
If you use a Jade and it does not yet have the fixes from 1.0.41, install that firmware through the official update path at the first opportunity when conditions are safe for handling the device (a calm place, with your written backup available). The developers advise against rushing in unsafe conditions. If the fixes are already installed, no action is needed. The source does not instruct replacing your seed, and it does not report device compromise or key leakage through these flaws.
Source: blog.blockstream.com