Affected scope
Mobile app · Seed-based activation
What the attack requires
Seed-based activation followed by in-app support contact within the vendor’s exposure window.
What changed
iOS 5.19.1 / Android 5.19.2
What this finding establishes
Tangem lists fixes in iOS 5.19.1 and Android 5.19.2. Its exposure scenario included contacting support through the app within seven days of seed-based activation. The vendor reported no losses and advised affected users to replace wallet keys; an update alone does not undo a prior exposure.