Laser Attack Can Reset Passwords on Tangem Crypto Wallet Cards, Unpatchable Flaw Revealed

Researchers at Ledger's Donjon security team demonstrated a laser attack that can reset the password of a Tangem crypto wallet card, giving an attacker full control. The flaw is unpatchable as Tangem cards cannot receive software updates, though the attack requires physical access and specialized lab equipment.

Context

Tangem crypto wallet cards are designed to securely store cryptocurrencies offline, providing a layer of protection against online threats. However, the inability to patch this flaw means that once a card is compromised, users have no recourse to secure their assets. The research from Ledger's Donjon security team underscores the importance of robust security measures in hardware wallets.

Why it matters

The discovery of a laser attack that can reset passwords on Tangem crypto wallet cards raises significant security concerns for users of these devices. This flaw highlights vulnerabilities in hardware wallets, which are often considered secure for storing cryptocurrencies. As the use of digital currencies grows, ensuring the safety of these wallets is crucial for consumer confidence.

Implications

This flaw could lead to increased risk for Tangem wallet users, particularly those with significant cryptocurrency holdings. If attackers exploit this vulnerability, it could result in financial losses for individuals and undermine trust in hardware wallets. The incident may prompt manufacturers to reassess their security protocols and encourage users to consider additional protective measures for their digital assets.

What to watch

Users of Tangem cards should monitor updates from the company regarding any potential solutions or recommendations for safeguarding their assets. The security community may also explore alternative methods to enhance the security of hardware wallets. Future research may reveal additional vulnerabilities in similar devices, prompting broader discussions on hardware wallet security.