Laser Attack Resets Tangem Wallet Passwords

Researchers from Ledger's Donjon security team have demonstrated a sophisticated laser attack capable of resetting the password on Tangem crypto wallet cards. The attack involves precisely timing a laser pulse directed at the chip within the wallet card. This targeted laser pulse can override the existing password, allowing an attacker to set a new password of their choosing. Once the password is reset, the attacker gains full control over the wallet and can transfer any cryptocurrency stored within it.

The security researchers detailed that this exploit bypasses the need for the original password or a backup card. The vulnerability lies in the physical manipulation of the chip, which can be exploited to reset its security parameters. This means that any Tangem wallet card subjected to this attack could be compromised, leading to the irreversible loss of the owner's digital assets. The researchers emphasized that this is a physical attack vector, distinct from software vulnerabilities.

While the attack is technically complex and requires specialized equipment and precise execution, it highlights a critical hardware-level vulnerability in the Tangem wallet design. The company has not yet released a patch or workaround for this specific issue, as it involves a physical component that cannot be updated remotely through software. This poses a significant risk for users who rely on Tangem wallets for securing their cryptocurrency holdings, particularly those with substantial amounts of digital assets. The full implications and the extent to which this attack could be practically deployed against a wide range of users remain under investigation by the security community.