Laser attack resets passwords on unpatchable Tangem cards

Security researchers have demonstrated that a sophisticated laser attack can bypass the password protection on Tangem hardware wallet cards, a vulnerability that cannot be fixed on devices already sold. The findings, published on July 10, 2026, by Ledger's Donjon security team, reveal a method to reset a card's password without knowing the original, granting an attacker full control of the associated cryptocurrency wallet.

The attack exploits a flaw in the firmware of the Samsung S3D232A secure element chip inside the Tangem card, which carries a high-grade EAL6 security certification. By firing a precisely timed nanosecond laser pulse at a specific area of the chip, researchers can disrupt a critical security check. This manipulation tricks the card into behaving as if it is in a legitimate password recovery mode, allowing a new password to be set without requiring the old one or a linked backup card.

However, executing this attack presents enormous practical barriers. It requires physical possession of the card, highly specialized laboratory equipment estimated to cost around $250,000, and expert knowledge in hardware security. The process is invasive, involving cutting open...