Laser Attack Resets Tangem Wallet Passwords on Cards That Can't Be Patched

Researchers at Ledger's Donjon security team have discovered a method to bypass the password protection on Tangem crypto wallet cards using a precisely timed laser pulse. The attack requires physical access to the card and a specialized lab setup ($250,000), but it allows an attacker to reset the card's password and steal funds. While the risk to most users is low, those holding significant value in Tangem cards are advised to move their funds immediately. This vulnerability stems from the card's inability to update its firmware, making it a permanent security flaw.