Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Researchers at Ledger's Donjon security team demonstrated a laser fault injection attack that can reset the password on Tangem crypto wallet cards without requiring the original password or a backup card. The attack requires physical access to the card and sophisticated, expensive equipment, making it impractical for widespread use. However, because Tangem cards lack firmware update capability, the vulnerability cannot be patched, leaving all existing cards permanently exposed. The risk is highest for lost or stolen cards containing significant cryptocurrency value.

AI-extracted · verify before operational use