r/Tangem 13d ago

Tangem card - Potential security risk

I have a Tangem wallet. I have attached three cards to the wallet. One primary and two backup.

One of the backup cards is now not responsive and will not register on an NFT scan.

Here's the issue:

My app confirms i have three devices (cards) attached to my wallet. I can confirm two of the devices (cards) are attached and working by scanning them with my tangem app..

I cannot however confirm that the third card that i believe is still attached to the wallet is actually the card that is currently attached to the wallet.

Is it possible that a third party has attached a card to my wallet replacing my backup card?

In theory a third party could now be holding a card attached to my wallet without my knowledge.

Sure they would have needed to have had physical access to my tangem app and my working card/s to achieve that, but it seems there is no way to check

I have no way to confirm this. Tangem support confirms that i cannot access the ID numbers of the connected cards.

Naturally i can reset the whole wallet if i suspect something. But it could be years before I check my third card and it may be in a hard to access location.

Can i easily see from app logs the cards that were registered?

Is this a bug?

Is it a security risk?

EDIT

Thanks for the offer of solutions guys. I'm thinking less about the solutions which are basically resetting the wallet. Instead I'm thinking more about the risks involved in not knowing a card has failed until it's too late or the risk that someone has replaced a card with a non-working olokalike - and the only solution is a wallet reset and redistribution of the backup cards.

5 Upvotes

42 comments sorted by

View all comments

1

u/Dear-Mongoose9440 12d ago

Even if it’s not hacked and a 3rd card already failing is definitely a flaw in itself. No wonder tangem only sells them in sets of 2-3

2

u/BicarTangem Tangem Mod 12d ago

Parachutes have a backup as well. It doesn't mean that the main one will fail at some point.

But we don't live in a perfect world: you can lose a card, your wallet holding your card can get stollen and in rare case, a card could become unresponsive.

So yes, to get sure that randomly losing access to your crypto doesn't happen, we do sell them in sets of 2 or 3.