Tangem Wallet:
the cheapest real cold storage, undercut by an unpatchable laser attack.
We tore apart Tangem's screenless NFC card wallet across seven weighted categories; from a genuinely rare EAL6+ chip in a battery-free, IP69K-rated card that costs under $70 for a full redundant set, to a real, independently-disclosed laser fault-injection attack that Ledger's own security lab confirmed cannot be patched on any card already in circulation; and landed on a score the marketing page won't show you.
Our take, up front: Tangem replaces the entire hardware-wallet formula: no USB device, no seed phrase by default, no screen. You tap a credit-card-sized NFC card, built around a Samsung S3D232A secure element certified EAL6+, against your phone to sign transactions, with a genuinely rare choice between seedless setup or a conventional 24-word phrase if you prefer it. It's genuinely well-built (IP69K waterproofing, a 6-gram card, functional from -25°C to +80°C), genuinely cheap (a full 2-card redundant set under $55), and had a clean, three-audit security record until this July. On July 9, 2026, Ledger Donjon, the same research lab behind the Trezor Safe 7 finding we covered earlier in this series, disclosed a laser fault-injection attack that resets a card's password without the original credentials, and critically, this cannot be patched: Tangem cards have no firmware update mechanism at all. Tangem's rebuttal is real and fair, the attack needs roughly $250,000 in lab equipment, physical possession, and weeks of work, and no real-world losses have been reported. It's also worth noting, for balance, that Donjon operates inside Ledger, one of Tangem's direct competitors, a point Tangem raised publicly and that's worth weighing alongside the technical findings. We weighted all of it below.
Tangem's Samsung S3D232A secure element is certified EAL6+, keys are generated on-chip and never leave it, and the wallet is fully non-custodial. Three independent audits, Kudelski Security in 2018, Riscure in December 2023, and Cure53 in 2026 covering the mobile app, found no backdoors or critical vulnerabilities. That clean record picked up a real, serious asterisk on July 9, 2026, when Ledger Donjon, the same research lab behind the Trezor Safe 7 finding covered elsewhere in this series, publicly disclosed a laser fault-injection attack: a single nanosecond laser pulse aimed at the chip flips a recovery-state check and resets the card's password without the original credentials, after which an attacker can drain the wallet. Critically, this cannot be patched; Tangem cards have no firmware update mechanism, so the flaw is permanent on every card already in circulation. This is also the second major Donjon report on Tangem within about a year, following a September 2025 brute-force finding. Tangem's rebuttal is real and worth weighing fairly: the attack requires physical possession, roughly $250,000 in specialized lab equipment, and weeks of work, making it a lab-only, non-scalable threat with no reported real-world losses. Tangem also publicly noted, fairly, that Donjon operates inside Ledger, a direct competitor, a legitimate point about potential bias worth considering alongside the technical findings.
Pros
- EAL6+ certified secure element with keys that never leave the chip
- Three independent audits found no backdoors or critical vulnerabilities prior to the Donjon finding
- Genuine choice between seedless setup or a conventional 24-word recovery phrase
Cons
- A real, disclosed laser fault-injection attack cannot be patched on any card already in circulation
- This is the second major security disclosure against Tangem from the same research lab within about a year
- Card firmware remains closed-source and cannot be independently verified
Sources describe genuinely broad coverage, ranging from 6,000-plus assets across 59-plus blockchains to 16,000-plus assets across 85-plus blockchains depending on the specific source and date, real growth over time rather than a contradiction. The companion app includes built-in swap (including cross-chain), staking, and buy/sell functionality, plus WalletConnect support for DeFi. At least one detailed hands-on tester specifically flags a real limitation: no NFT support at the time of testing.
Pros
- Broad, actively expanding asset support (6,000-16,000+ across 59-85+ blockchains depending on source)
- Built-in swap, staking, and buy/sell functionality in the companion app
Cons
- No NFT support confirmed by at least one detailed hands-on tester
Tap-to-sign NFC simplicity is repeatedly described as genuinely easy, even for first-time hardware wallet users, and it shows in the numbers: 4.9/5 on both Google Play (28,000-plus ratings) and the App Store (14,000-plus ratings), a real, well-corroborated satisfaction signal. But there's a real, structural trade-off: the card has no screen at all, so the phone app is the only place you see the destination address and amount before approving a transaction, a meaningful reduction in independent verification compared to devices with an on-device display.
Pros
- Genuinely simple tap-to-sign setup, praised even for first-time users
- Very strong, well-corroborated app-store ratings (4.9/5 across both platforms)
Cons
- No on-device screen; transaction verification depends entirely on the phone app
At just 6 grams, the card is genuinely credit-card-sized and pocket-friendly. It carries a real IP69K waterproof and dustproof rating and functions across a genuinely wide -25°C to +80°C range, both independently confirmed through actual hands-on temperature and water resistance testing by at least one reviewer. With no battery and no moving parts, there's nothing to degrade over years of storage. Tangem backs the card with a hardware warranty of up to 25 years, a notably long, real commitment.
Pros
- Independently-tested IP69K waterproof and dustproof rating
- Functions across a genuinely wide -25°C to +80°C range
- Battery-free with no moving parts and up to a 25-year hardware warranty
Cons
- A lost or damaged card (without a backup) results in lost access to funds
Real, strong app-store satisfaction extends to Tangem's support team specifically, praised by at least one reviewer for assistance with complex issues. No regulatory sanctions are on record. But the real, serious July 2026 Donjon disclosure, and the fact that it's the second major security finding against the company within about a year, are genuine, current reliability concerns that a strong general support reputation doesn't fully offset. Tangem's own public response, downplaying the practical risk while raising a fair point about Donjon's independence, reads as a reasonable, measured reply rather than a dismissive one.
Pros
- Strong, independently-corroborated customer support satisfaction
- No regulatory sanctions on record
Cons
- Second major security disclosure from the same research lab within about a year
- The most recent disclosure specifically cannot be resolved with a patch
A 2-card set runs about $54.90 and a 3-card set about $69.90, genuinely the most affordable way to get multiple, fully independent cold-storage backups in this category. One reviewer's own framing captures it well: at roughly $25 per card in the 2-pack, that's "pretty cheap insurance" for real hardware-level redundancy most single-device competitors don't offer at any price. No wallet-specific ongoing fees apply; only standard blockchain network fees.
Pros
- Genuine multi-card redundancy for under $70 total
- No wallet-specific ongoing fees beyond standard network fees
Cons
- Free shipping requires an order above $89; smaller orders carry a variable shipping fee
Built-in swap (including cross-chain), staking, and buy/sell functionality are all real, working extras in the companion app. A genuinely distinctive option exists for users who want it: a ceramic ring form factor, letting you wear your wallet rather than carry it, a physical option not found elsewhere in this series. The choice between seedless and conventional seed-phrase setup at purchase is itself a real, distinctive extra most competitors don't offer.
Pros
- Genuinely distinctive ceramic ring form factor option
- Real choice between seedless and conventional seed-phrase setup
- Built-in swap, staking, and buy/sell in the companion app
Cons
- Lacks advanced features like Shamir backup found on pricier touchscreen competitors
Buy only through Tangem's official store, and store your cards separately.
Third-party marketplace listings can include older batches or limited warranty coverage. Given the disclosed laser attack requires physical possession, keep your backup cards in genuinely separate, secure locations.
Genuinely excellent value and build, with a real security asterisk that just appeared.
Tangem's core pitch is compelling and mostly holds up: real EAL6+ hardware, independently-tested durability that goes well beyond what most competitors bother certifying, and multi-card redundancy for a genuinely remarkable price. The July 2026 Donjon disclosure doesn't erase that, but it does complicate the "nothing to patch, nothing that can go wrong" version of the pitch specifically, since the vulnerability found is real, confirmed, and permanent on cards already sold. Tangem's response was measured and its practical risk assessment is largely fair; this isn't a wallet that got hacked in the wild. It's one whose central architectural promise, that a screenless, updateless card removes entire categories of risk, was shown to trade those categories for a different one: a flaw that, once found, can never be fixed.
The scorecard above is deliberately general. Whether the Tangem Wallet is right for you depends heavily on which of these you already are.
The first-time buyer who wants cheap, genuine multi-device redundancy
A full 2-3 card backup set for under $70 is a real, structurally different value proposition than buying multiple single-device wallets, and the tap-to-sign setup is genuinely approachable.
The traveler who wants a genuinely durable, pocket-sized wallet
Independently-tested IP69K waterproofing and a wide temperature range make this a real, practical choice for a device that leaves the house regularly.
The buy-and-hold user comfortable without on-device screen verification
You're not actively trading or approving frequent, high-stakes transactions, so verifying through the phone app rather than a dedicated screen is an acceptable trade-off.
High-value holders specifically worried about physical device theft
Given the disclosed, unpatchable laser attack requires physical possession of a card, anyone whose threat model includes losing physical control of their device to a sophisticated actor should weigh this carefully.
The scorecard covers the headline judgment calls. These four tables cover the specifics we didn't want to bury in prose; the Donjon laser attack in plain terms, the real cost of getting into this ecosystem across every package Tangem sells, how the screenless design trades off against traditional hardware wallets, and how it compares against the other wallets we've reviewed.
The Donjon laser attack, in plain terms
| What happened | |
|---|---|
| Who found it | Ledger Donjon, the same lab behind the separate Trezor Safe 7 TROPIC01 finding covered elsewhere in this series |
| When | Privately disclosed February 10, 2026; publicly published July 9, 2026 |
| Method | Single nanosecond laser pulse targeted at the secure element during the recovery-state check |
| What it does | Resets the card's access password without needing the original credentials |
| Patch available? | No; Tangem cards have no firmware update mechanism, so the flaw is permanent |
| Requirements to replicate | Physical possession, ~$250,000 in specialized lab equipment, and weeks of work, per Tangem |
| Repeat pattern? | Yes; this is the second major Donjon report against Tangem, after a September 2025 brute-force finding |
| Real-world losses reported? | None, per Tangem |
Worth noting for balance: Tangem publicly pointed out that Donjon operates within Ledger, a direct competitor, a fair point about potential bias to weigh alongside the technical findings themselves.
The real cost of every Tangem package
| Package | Price | What you get |
|---|---|---|
| 2-card set | ~$54.90 | Basic redundancy; one spare key |
| 3-card set | ~$69.90 | An extra backup card for families or travel |
| Family Pack | $139.80 | A classic black set plus a second 3-card set of your choice |
| Ring (with 2 cards) | $150-$160 (sources vary) | A wearable ceramic ring plus two backup cards |
| Pro Kit | $180 | The most complete bundle Tangem offers |
Orders below $89 carry a variable shipping fee; bundling toward that threshold is a real, easy way to avoid it.
Screenless card vs. traditional hardware wallet
| Tangem | Ledger / Trezor devices | |
|---|---|---|
| On-device screen | None | Yes (except Ledger Nano S Plus, which has a small button-navigated screen) |
| Firmware updates | Not possible; permanently embedded | Possible via official update process |
| Seed phrase | Optional; seedless model available | Required (standard 24-word phrase) |
| Physical form factor | Credit-card-sized or ring | USB stick or dongle-shaped |
The lack of a firmware update path is a genuine double-edged trade: no risk of a malicious or buggy update, but also no way to fix a flaw once one is found, exactly what July 2026 demonstrated.
How it compares to other hardware wallets we've reviewed
| Wallet | Price | Screen | Patchable? | Notable trade-off |
|---|---|---|---|---|
| Tangem Wallet | $54.90-$69.90 (2-3 card set) | None | No | Disclosed, unpatchable laser fault-injection vulnerability |
| Ledger Nano S Plus | $79 | Small, button-navigated | Yes | No iOS support; same company-wide Recover/breach history |
| Trezor Safe 5 | $129 (sources vary) | Yes (color touchscreen) | Yes | Signs outside the secure element |
| Trezor Safe 7 | $249 | Yes (OLED touchscreen) | Yes | Disclosed lab-conditions TROPIC01 vulnerability (patchable via dual-SE design) |
Tangem is the only wallet in this series with a disclosed vulnerability that its own architecture makes permanently unpatchable; every other flagged issue in this series could theoretically be addressed through a firmware update.
We don't just want to hand you our number; we want to show you how it sits next to what other review desks and comparison sites have published. Coverage genuinely splits depending on how directly each outlet engages with the July 2026 Donjon disclosure specifically, some weigh it heavily, others barely mention it.
Our score lands close to the aggregated industry average, modestly below it. Sources published closer to July 2026 and specifically focused on the Donjon disclosure land near ours; sources leaning more on Tangem's general price and build reputation, without weighing the unpatchable nature of the finding as heavily, land higher.
| Source | Score | Type |
|---|
Scores compiled by our editorial team from publicly available reviews as of August 2026. "Editorial estimate" means the outlet didn't publish a single numeric score, so we converted their published verdict and sentiment into a comparable 100-point figure. Verify current figures directly with each source before citing them elsewhere.
For most everyday users, realistically not. The attack requires physical possession of your card plus roughly $250,000 in specialized lab equipment and weeks of work. It's a genuine, confirmed vulnerability, but a lab-only, non-scalable one with no reported real-world losses to date.
No. Tangem cards have no firmware update mechanism at all; the firmware is permanently embedded during manufacturing. This means the vulnerability disclosed in July 2026 cannot be patched on any card already in circulation.
Tangem itself raised this exact point publicly, noting Donjon operates within Ledger, a direct competitor. That's a fair, legitimate consideration. At the same time, the technical findings have been corroborated by multiple independent outlets, and Tangem's own rebuttal doesn't dispute the mechanics of the attack, only its practical severity.
If you have backup cards, you can continue using the wallet normally. If you lose all your cards (or the ring, without a backup), you lose access to your stored assets, since there's no separate seed phrase to fall back on unless you specifically chose the conventional seed-phrase setup at purchase.
No. Tangem offers a genuine choice at setup between the seedless model (keys generated and cloned only between your physical cards) or a conventional 24-word recovery phrase if you prefer that more familiar backup method.
Yes, the ring uses the same underlying secure element and security model as the cards; it's a different physical form factor for people who want to wear their wallet rather than carry it separately.
Through the app's server-side attestation on first scan, rather than a device-side authenticity check. This is a real, structural difference from wallets that verify authenticity on the device itself, and it's part of why buying only through official channels matters.
Tangem's official store is the safest option. Authorized resellers exist, but third-party marketplace listings can include older batches, higher prices, or limited warranty coverage.
More Reviews
BitBox02 – Hardware Wallet Review
Score: 71/100. Swiss-made, open-source, and genuinely clever, but sources disagree on whether multisig still works.
Read More
Ledger Flex – Hardware Wallet Review
Score: 76/100. Best chip Ledger makes, but closed-source firmware, the Recover controversy, and two breaches still linger.
Read More
NGrave Zero – Hardware Wallet Review
Score: 62/100. The "EAL7 wallet" is real, but the actual secure element underneath is a lower EAL5+ chip.
Read More
Trezor Safe 7 – Hardware Wallet Review
Score: 78/100. Fully auditable TROPIC01 chip, undercut by a real Ledger Donjon laser fault-injection disclosure.
Read More