Tangem: the risk of laser attacks is "virtually nonexistent"

• Tangem only considers the physical loss or theft of the card to be high risk for these attacks.
• The company claims that its firmware design aims to prevent permanent lockouts for its users.

Tangem published its official response to the technical report from Ledger Donjon, in which it acknowledges the nature of the laser fault injection attack but emphasizes that it requires invasive physical access, specialized high-cost equipment, advanced knowledge, and a process that leaves visible evidence on the card.

The company argues that the real risk for the vast majority of users is "virtually nonexistent" and that there have been no recorded losses of funds due to this type of attack on any hardware wallet in the market.

According to Tangem, although the attack described by Ledger Donjon researchers is technically demonstrable in a controlled laboratory environment, it does not represent a practical threat to users who maintain physical control of their cards.

The company maintains that its firmware design prioritizes protection against threats that have indeed caused real losses in self-custody, such as exposure of seed phrases.

In its statement, Tangem presented a risk table in which only the physical loss or theft of the card is classified as dangerous. In contrast, the possibility that an attacker has the necessary laboratory equipment (estimated at around $250,000), qualified specialists, and the willingness to commit a criminal act is considered very low risk or nearly impossible.

The company also noted that the attack leaves visible physical damage on the card and that the most significant historical losses in cold wallets or hardware wallets do not come from sophisticated physical attacks but from poor management of seed phrases by users.

The central point of discussion is whether an attack that can only be executed in a laboratory with significant resources, and that has not caused real losses, should be considered a critical vulnerability for end users.

The Ledger Donjon report, which we shared in a recent article on CriptoNoticias, highlights that the flaw is irreparable (because the firmware of Tangem cards cannot be updated) and affects all units in circulation. Although the report was made public on July 9, the vulnerability was communicated to Tangem on February 10, 2026, according to the report signed by researcher Baptistin Boilot.

Tangem, for its part, defends that its approach aims to prevent permanent lockouts that could leave users without access to their funds, prioritizing real usability over protections that would only be effective against laboratory threats.

Tangem's response raises a broader debate about how hardware wallet companies should communicate the differences between technical laboratory findings and real risks that affect users on a daily basis.

The case also underscores the importance for Bitcoin users to evaluate the security of their devices not only by certifications or technical reports but by the real likelihood that an attack could be executed against them and by the more frequent threats that have proven to be causes of significant losses.

Disclaimer: This content is provided for general branding and informational purposes only and doesn't constitute financial, investment, legal, or tax advice. Any events, rewards, online events, or related information mentioned herein should not be considered a recommendation, solicitation, or invitation to purchase, sell, trade, or otherwise deal in any crypto assets or to use any services. Crypto assets are highly volatile and may result in loss. WEEX services and online events may not be available in all regions and are subject to applicable laws, regulations, and eligibility requirements. You are responsible for ensuring that your use of WEEX services complies with local laws and for carefully assessing the risks before participating in any crypto-related activities.