XKEYCHAINX LABS
Tangem / Public disclosure

Tangem: laser fault password reset

Ledger Donjon reports an unauthorized password reset using invasive laser fault injection. Tangem acknowledges the scenario but challenges its practical significance.

Source date: 09 JUL 2026Reviewed: 11 October 2026

Affected scope

Tangem cards · Physical access

What the attack requires

Possession of a card and an invasive specialist laser laboratory.

Response & remediation

What changed

No field firmware patch per researcher

What this finding establishes

Donjon describes specialist equipment costing roughly $250,000 and reports no firmware update path for cards already in circulation. This is a laboratory attack requiring possession of a card, not a remote exploit or evidence of an in-the-wild theft campaign.