Ledger Donjon Research Shows Laser Pulse Can Reset Tangem Crypto Wallet Passwords
Implement physical security controls to protect Tangem cards from laser‑based password reset attacks.
Implement physical security controls to protect Tangem cards from laser‑based password reset attacks.
Summary
Researchers from Ledger’s Donjon security team demonstrated that a precisely timed laser pulse aimed at the chip inside a Tangem crypto wallet card can reset the card’s password to any value chosen by the attacker. The attack requires no old password or backup card and, once executed, gives the attacker full control over the wallet, enabling them to move the coins. The researchers noted that the attack is not an emergency for most owners because it requires specialized equipment and precise timing, but it highlights a potential vulnerability in the physical security of crypto wallets. The study emphasizes the need for additional safeguards to protect against laser‑based attacks. The findings were presented at a security conference and are not yet assigned a CVE.
Key changes
- Laser pulse can reset Tangem wallet password to any chosen value
- No old password or backup card required
- Attack requires precise timing and specialized equipment
- Attacker gains full control and can move coins
- Not an emergency for most owners but highlights physical security risk