Ledger Donjon Says Laser Pulse Can Reset Tangem Hardware Wallet Passwords

Ledger Donjon researchers said attackers can use a single laser pulse to reset the password on Tangem hardware wallet cards, enabling them to sign arbitrary transactions and potentially move user assets. According to Foresight News, the attack requires physical contact with the card, opening the device, and about $250,000 in laboratory-grade fault-injection equipment, and it cannot be carried out remotely. The researchers said the issue cannot be fixed because Tangem cards do not have a firmware update mechanism. Ledger advised that users do not need to panic if their card has remained under their control. However, if a card has been lost or stolen, Ledger said users should treat their assets as at risk and move them to a new device.