Skip to content

Tangem / Public disclosure

Android genuine-check bypass

A counterfeit card could pass the authenticity workflow.

Source date: 2025-05-15Reviewed: 11 October 2026

Affected scope

Android app before 5.18.3

What the attack requires

Counterfeit card interacting with the vulnerable app.

Response & remediation

What changed

Android app 5.18.3, released November 28, 2024.

What this finding establishes

Public disclosure followed the fix; separate from private-key logging.