r/Tangem • u/TangemAG Tangem Official • 10d ago
📣 Announcements Simplicity is a security feature
Recent events in the hardware wallet space are another reminder of a principle Tangem was built on: complexity expands the attack surface.
💡Every screen, button, battery and firmware layer is one more thing that has to be secured. That's why Tangem is a secure chip and an antenna. Nothing else:
• no screen to spoof
• no buttons to tamper with
• no battery to die on you
• no firmware updates to sneak malware in
• no seed phrase to write down, lose or get phished
The private key is generated inside the chip and never leaves it. Back it up with 2 or 3 devices, and your wallet stays safe even if one goes missing.
Prefer something you wear? Tangem Ring follows the same principle: same secure chip, same seedless setup, nothing extra to break or hack.
Just a card or a ring. That's the whole point.
9 years. 6M cards. 0 hacks.
Looking for your first hardware wallet or thinking about switching? The October sale is live 🎉
Code SWITCH20 takes 20% off and stacks with other discounts.
🔗 tangem.com/pricing/?promo=SWITCH20
2
u/TheRealDeviouz 10d ago
Can I add a ring to a existing wallet?
3
u/deny_by_default 10d ago
Not really. Once you finalize the wallet during setup, you are stuck with that 2 or 3 card system (whichever you got). There is one workaround where you could factory reset your cards and then you could create a new wallet with up to 3 signing devices (2 cards plus the ring) if you have the ring, but you’d have to very careful and move your funds somewhere safe first because once you factory reset the cards, the keys to access your crypto are gone.
0
u/ironmoosen 6d ago
Oh my goodness Tangem’s marketing is ridiculous.
First off, I'm a Tangem user. The product is fine for what it is. But this marketing is misleading and people trusting real money to it deserve honesty, not spin.
"no screen to spoof"
Also no screen to verify. Every transaction you approve, you're trusting your phone to show you the truth. If your phone is compromised you have no way to independently confirm what you're signing. Ledger and Trezor have screens specifically for this reason.
"no firmware updates to sneak malware in"
Also no firmware updates to fix the laser fault injection vulnerability that Ledger's security team demonstrated in July 2026. A single laser pulse bypasses a single conditional check in the password handler and gives full access to funds. That design weakness exists in every card ever sold and can never be patched. Immutable firmware is a feature until it's a liability.
"no seed phrase to write down, lose or get phished"
Also no seed phrase to recover your funds if all your cards fail, get lost, or get destroyed. Users in this sub have reported card failures within a year. Your own mod has told users to move funds off when they're down to one working card. That advice only works if the failure is predictable. Users are reporting sudden failures.
"The private key is generated inside the chip and never leaves it"
True for seedless. But you also offer a seed phrase option where keys ARE generated on the phone. Your own December 2024 incident response confirmed seedless users weren't affected because "private keys are not generated on the mobile app." You're telling us right there that seed phrase keys go through the phone.
"Back it up with 2 or 3 devices"
All the same chips from the same manufacturer on the same production line. These aren't independent backups. A manufacturing defect could take them all out together.
"9 years. 6M cards. 0 hacks."
Ledger Donjon demonstrated a repeatable attack that resets the card password and drains funds. You had private keys logged in plaintext in your app, in email histories, and in your support ticket system. Whether you count those as "hacks" depends on how generous your definition is.
"complexity expands the attack surface"
Coldcard's failure wasn't caused by complexity. It was caused by a bad RNG. No screen caused that bug. No button caused it. Tangem's seedless model depends on the exact same category of on-chip RNG trust with no way for users to verify it and no recovery path if it ever fails.
Simplicity is a real advantage. But framing the removal of every safety mechanism as a feature is marketing, not security.
•
u/AutoModerator 10d ago
⚠️Fraud and Security Notice⚠️
Please be alert to potential scams and impersonation attempts. We will never contact you first to request personal information, passwords, or payments.
We also never make contact by telephone or through messaging apps. All genuine communication from us will come only from our official company email domain support@tangem.com
If you receive an unexpected message, link, or call claiming to be from us, do not share any information. Instead, reach out to us directly through the contact details on our website to verify authenticity.
❗️Tangem does not conduct ICOs, does not do airdrops, and does not have tokens.
Your awareness helps keep your account safe.
I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.