Someone Pointed a Laser at a Crypto Wallet and Now the Coins Are Gone, Cool, Great, Fine
Oh good. A new attack vector. Just what I needed at 3am while I'm already dealing with a Lamb who forwarded a fake grain email to seventeen coworkers and CC'd the entire Shepherd council on his reply-all apology.
So here's the situation. Ledger's Donjon research team, who apparently have access to lasers and too much free time, found that you can zap the chip inside a Tangem hardware wallet card with a precisely timed laser pulse and it will just, reset the password. To whatever you want. No old password required. No backup card needed. Just vibes and photons.
The attacker picks the new password. They control the wallet. The coins walk out the door. Your retirement fund is now someone else's problem.
The truly beautiful part? The cards cannot be sheared. There is no ointment. No patch. No firmware update. The hole in the fence is load-bearing. It is structural. It is a design feature of the fence itself.
Now, before the Shepherds start forwarding this article to the whole flock with "thoughts??" in the subject line: calm down. This is a physical attack. The coyote needs your actual card, specialized equipment, and the kind of patience that most criminals reserve for longer cons. It is not trivial.
But "not trivial" is doing a lot of heavy lifting for a device that is supposed to be a vault.
Hardware wallets exist for one reason. To be the thing that cannot be remotely compromised. The whole pitch is "air-gapped, physical, safe." The moment someone can walk up to your card with a laser and leave with your entire portfolio, the product has a credibility problem that no press release is going to fix.
Tangem's response so far has been roughly the energy of a Shepherd shrugging at a wolf-shaped hole in the electric fence and saying "well statistically most wolves don't have lasers."
Technically accurate. Still not the vibe I want from my crypto storage solution.
Remediation
Look, I'm tired. Here's the short version:
If you use a Tangem wallet, treat it like cash. Physical security is now your entire threat model. Do not leave it somewhere a coyote with a laser can access it.
If you have meaningful funds on it, move them to a wallet that can actually receive ointment when a hole in the fence is discovered.
If you are a Shepherd asking me to evaluate Tangem for enterprise use, I am going to need you to read this article again, slowly, and then never ask me that.
Stay paranoid, the lasers are apparently real now.
Original Report: https://thehackernews.com/2026/07/laser-attack-resets-tangem-wallet.html