Tangem Wallet: what the sources say

The questions, with sources

"n/v" or "not verified" means we could not confirm it from a source we could read. Maker claims are marked as such. Confirm on the maker's site before you buy. Education only, not investment advice.

Five facts

• Tangem Wallet is sold as a set of 2 or 3 NFC cards that each hold the same key, listed at $54.90 and $69.90 on the official pricing page [source 1][source 8].
• The card uses a Samsung secure element that Tangem describes as EAL6+ certified [source 3].
• Tangem lists audits by Cure53 (2026-03, mobile wallet), Riscure (2023-12, hardware wallet and firmware) and Kudelski Security (2018, smartcard code) [source 4].
• In July 2026 Ledger Donjon disclosed a physical laser fault-injection attack that can reset a card's access code; Tangem says cards cannot be patched and calls the attack lab-only [source 13][source 14].
• In December 2024 a Tangem app bug logged private keys of seed-phrase wallets in support logs; Tangem fixed it on 2024-12-30 and states no funds were lost [source 11].

Audits

• 2026-03 Cure53. Scope: Mobile wallet (iOS / Android) source
• 2023-12 Riscure. Scope: Mobile hardware wallet and firmware: secure element usage, firmware integrity, wallet architecture source
• 2018-12 Kudelski Security. Scope: Smartcard code (older than 5 years) source

Publicly disclosed weaknesses

• 2026-07 Ledger Donjon (security team of Ledger, a competing wallet maker) reported to Tangem on 2026-02-10 a laser fault-injection attack on the card's Samsung secure element that bypasses the recovery-mode check so a new access code can be set without the old code or a second card. Requires physical possession, decapsulation and lab equipment (Donjon estimates about $250,000 lab, about two hours per card). Tangem states cards cannot be firmware-updated, so existing cards are not patched; Tangem calls it lab-only, affecting secure elements generally, and states no known real-world losses. Funds lost: no. Not fixed (as of the source) source

Disclosed weaknesses are listed whatever their severity. "Funds lost" is what the sources say. "Fixed" means the source states a fix exists, which only helps if you update.

Incidents at the maker or its service providers

• 2024-12 Tangem mobile app logged the private key when a wallet was activated with a seed phrase; logs could be seen by support if the user contacted support via the app within 7 days. Reported on Reddit 2024-12-29; Tangem fixed in app versions 5.19.1 (iOS) / 5.19.2 (Android) on 2024-12-30 and erased support logs. Customer funds lost: no. Outcome: Tangem states fewer than 0.1% of users could be affected and no funds lost; critics said the company downplayed it (Cointelegraph). Affected users advised to move funds to a new wallet. source

These affect the company or its customers and apply to every device of the brand. They are not weaknesses of this device.

Questions about Tangem Wallet

Is Tangem Wallet safe?

We do not give a yes or no, because safety depends on what you need to protect and on facts that change. We found 1 publicly disclosed weakness, 1 of them not fixed according to the source and 1 company incident in our search. Read the sources above before you buy.

Does Tangem Wallet need an internet connection?

Signing happens on the device. How the device talks to your phone or computer depends on its connections: NFC. The companion app or software that builds the transaction is online.

Who found the weaknesses listed for Tangem Wallet?

The page names who disclosed each one when the source does. Several were found by a competing maker's research team or by independent security firms. We cite the affected company's own statement where we found one, and label press-only reports.

Where this comes from

• [1] Tangem Wallet Prices accessed 2026-10-11
• [2] Tangem home page accessed 2026-10-11
• [3] Tangem security features blog accessed 2026-10-11
• [4] Tangem security audits accessed 2026-10-11
• [5] Tangem contacts accessed 2026-10-11
• [6] Tangem: What happens if Tangem shuts down accessed 2026-10-11
• [7] Tangem passphrase blog (2024-05) accessed 2026-10-11
• [8] Tangem: before buying a 2 or 3-card set accessed 2026-10-11
• [9] Tangem: How many cryptocurrencies (2026-03) accessed 2026-10-11
• [10] Tangem bug bounty announcement (2024-12) accessed 2026-10-11
• [11] Tangem: log issue statement (2024-12-31) accessed 2026-10-11
• [12] Cointelegraph: Tangem private key leak fixed accessed 2026-10-11
• [13] The Hacker News: Laser attack resets Tangem wallet (2026-07-10) accessed 2026-10-11
• [14] Tangem comment on Ledger Donjon article (2026-07-09) accessed 2026-10-11

Not verified: EUR price not displayed (USD only). Card firmware open-source status, multisig, passkeys, current passphrase-on-create status not verified. Audit PDFs not read (summary page only). EAL6+ and Samsung chip are maker claims. Which card generations are affected by the laser attack not stated. Donjon article itself not read (via press report and Tangem reply).

See how we check. To report an error, use corrections and right of reply.