CVE-2025-27840: Critical Vulnerability in Chinese ESP32 Chip Puts Blockstream Jade Bitcoin Wallets at Risk

A critical vulnerability has been identified in the Chinese ESP32 chip, which is widely used in Bitcoin hardware wallets, including Blockstream's Jade wallet. The flaw, designated CVE-2025-27840, arises from insufficient entropy in the chip's random number generation, potentially enabling the theft of private keys. This vulnerability poses a risk not only to Bitcoin traders but also threatens billions of Internet of Things (IoT) devices that utilize the same chip. Researchers from Crypto Deep Tech have reported the issue, urging traders to implement security measures immediately to safeguard their assets.