A phishing campaign has targeted Blockstream Jade users, leading to $12 million in losses in August 2025. The scam involved emails impersonating firmware updates, tricking users into downloading malicious files that could compromise private keys. Blockstream confirmed it does not send firmware updates via email and reported no data breach. In the first half of 2025, scams and hacks have resulted in $3.1 billion in losses, according to Scam Sniffer and Hacken. Users are urged to verify firmware updates through official channels and avoid unsolicited emails to safeguard their assets.