Ledger Researchers Claim Laser Attack on Tangem Hardware Wallets; Tangem Dismisses Risk
Researchers from Ledger Donjon claim a laser fault injection attack can reset the NFC password on Tangem hardware wallets, potentially allowing unauthorized transaction signing. Tangem says the risk to ordinary users is practically nonexistent and notes Ledger is a competitor.
Ledger's security research team, Ledger Donjon, has disclosed a physical attack method targeting Tangem hardware wallets. According to their findings, a laser fault injection technique can reset the NFC card password, enabling an attacker to sign transactions without authorization.
The researchers state the vulnerability affects all Tangem cards currently in circulation and cannot be patched because the devices do not support firmware updates. However, executing the attack requires a stolen or lost card, laboratory equipment costing approximately $250,000, expertise in hardware security, and significant preparation time.
Tangem responded by describing the risk for ordinary users as "practically nonexistent," emphasizing the high cost and complexity of the attack. The company also pointed out that Ledger is a competitor in the hardware wallet market.
Source: ForkLog