Laser-Based Password Reset Vulnerability in Tangem Crypto Wallet Cards

Researchers discovered a physical vulnerability in Tangem crypto wallet cards allowing password reset via laser manipulation, exploiting a firmware flaw that cannot be patched. The attack requires physical access and significant resources, posing a risk primarily to lost or stolen cards holding substantial value.

Researchers at Ledger's Donjon security team have shown that a precisely timed laser pulse, aimed at the chip inside a Tangem crypto wallet card, can reset the card's password to anything the attacker picks.

No old password. No backup card. Once it is reset, whoever did it controls the wallet and can move the coins out.

This is not an emergency for most owners. The attack needs

Read original article