Is Tangem safe? Tangem vs Ledger vs Trezor, risk by risk
Published · Updated
Short answer: Tangem is a real hardware wallet, but it trades risks rather than removing them. The card has no screen, so you check transactions on your phone. Without a seed phrase, losing every card loses the funds. Its firmware can't be updated, so flaws can't be patched. Buy only from Tangem or its listed resellers. (Tangem)
No affiliate links: we have no affiliate or referral deal with Tangem, Ledger or Trezor. Tangem runs a referral program that pays a fee on every purchase made through a partner's link; we don't use it. (Tangem) Store links on this page go to each maker's own store or authorized-reseller list. What this covers: is Tangem safe, and how its card wallet compares with Ledger and Trezor on the risks that drain normal people: no screen vs. a screen, seedless card backups vs. a recovery phrase, losing your cards, phishing, tampered or counterfeit devices, lab attacks on a lost card, firmware updates, batteries and NFC, and where to buy each one. Who it's for: you, if you're choosing your first hardware wallet, or you own a Ledger or Trezor and the October 2026 implant news has you looking at a card wallet. What it isn't: a price shootout, a "best wallet" ranking or investment advice. For Ledger vs Trezor in depth, see our two-way comparison.
Key facts
- Tangem keeps your private key on a secure chip in a card or ring with "no battery, no screen, and no internet connection." You tap it to your phone over NFC; the Tangem app is your only display. (Tangem)
- By default there's no seed phrase: the chip creates the key and copies it once to the 2 or 3 cards in your set. Tangem says that if every card is lost and you made no seed phrase, the funds can't be recovered. (Tangem; Tangem)
- If you choose a seed phrase, the Tangem phone app generates the words, not the card. A December 2024 app bug logged some seed-phrase users' private keys; Tangem fixed it and says no funds were lost. (Tangem; Tangem, 2024-12-31)
- Tangem's card firmware "cannot be updated," so flaws can't be patched. In July 2026, Ledger's security lab, Donjon (Ledger competes with Tangem), showed a roughly $250,000 lab laser attack that resets the access code on a card in an attacker's hands. Tangem replied the same day: "It is not scalable." (Tangem; Ledger Donjon, 2026-07-09; Tangem, 2026-07-09)
- Ledger and Trezor have their own screens and standard recovery phrases (how Trezor and Ledger compare), and both have had real incidents (Is Ledger safe?). On all three, phishing for your backup is the bigger everyday risk.
Card wallet vs. a hardware wallet with a screen: what actually changes?
All three keep your private key on a secure chip. When you compare Tangem vs Ledger or Trezor, what differs is what you look at, what you back up, and what you can lose.
- What you look at. A Ledger or Trezor shows the address and amount on its own screen. A Tangem card has none; you check on your phone. [Our inference: the phone becomes the screen, so a hacked phone matters more.] Either way, check the full address. (Tangem)
- What you back up. Ledger and Trezor give you a recovery phrase, with optional extras like Ledger Recover or Trezor Multi-share. Tangem gives you extra cards instead, unless you choose a phrase. (Tangem)
- What powers it. No battery: the phone's NFC field wakes the card. Ledger and Trezor models use USB-C, and some add a battery and Bluetooth. (Ledger; Trezor)
- What it runs on. Tangem says it is mobile-only, with no desktop or web app. Ledger and Trezor also work on desktop. (Tangem, 2026-07-22)
Screen device: [ device with screen ] + [ paper: 24 words ].
Card set: [ card 1 ] [ card 2 ] [ card 3 ]. Any one card + access code = full access. Lose all three with no seed phrase = gone.
Recreated illustration. Not to scale.
This page covers Tangem's hardware cards and ring. Tangem Mobile, a phone-only wallet with a cloud backup option, is a different product with different risks. (Tangem)
How do Tangem, Ledger and Trezor compare on the risks that matter?
One row per risk. Ledger and Trezor cells are shortened from our two-way comparison, sourced 2026-10-25. Tangem cells come from pages opened 2026-10-27, with key pages re-checked 2026-10-28.
| Risk | Tangem (card/ring) | Ledger | Trezor | What this means for you |
|---|---|---|---|---|
| Where you check what you sign | Phone app; no screen on the card. (Tangem) | Device screen; Clear Signing; blind signing off by default. | Device screen; Clear Signing for supported contracts. | Install the Tangem app only from the official store or Tangem's site. [Our inference: a fake app is a bigger worry without a device screen.] |
| Backup model | No phrase by default: 2–3 identical cards, cloned once. Optional 12- or 24-word phrase the app generates. (Tangem; Tangem) | 24 words; optional paid Recover; optional Recovery Key, a PIN-locked NFC card holding the words. (Ledger) | 20 words or Multi-share Backup. | "Guard a paper phrase" becomes "never lose every card." [Our advice: keep cards in separate places.] |
| Losing the backup | All cards gone, no phrase: funds gone. (Tangem) | Restore from the 24 words. | Restore from words or shares. | Seedless recovery "requires an existing card from the same set." (Tangem) |
| Phishing for your backup | Seedless: no phrase to phish. Tangem has no phone support and never sends letters. (Tangem) | Ledger never texts or calls. | "Any request for your wallet backup… is always a scam." | No real support asks for your phrase, code or PIN: fake wallet support scams. |
| Tampered or counterfeit device | App checks the card; Tangem calls it "entirely safe to buy anywhere." A 2024 Android bug let a counterfeit pass; fixed. (Tangem; NVD) | Genuine Check can't detect an added implant, like the CryptoBilis-style implant. | Ships without firmware; checks its signature. | Where you buy matters for all three: see where to buy. |
| A thief has your device | Access code; waits up to 45 seconds after 6 wrong tries. Donjon bypassed the wait (2025) and reset the code by laser (2026); Tangem calls both impractical. (Tangem; Donjon; Tangem; Tangem) | Ledger says more than three wrong PINs wipes the device. (Ledger) | 16 wrong tries erase the device. | On Tangem, use a long access code. |
| Firmware updates | None, ever: no fake updates, no patches. (Tangem) | Updatable; watch for a fake Ledger firmware update. | Updatable: update only inside the official app. | On Tangem, a flaw found later stays in the card. |
| Can outsiders inspect the code? | App open source; card firmware closed ("security through obscurity," Tangem's words); audit summaries only. (Tangem; Tangem; Kudelski) | About 95% open or reviewable. | Device software open source. | A trust question for experts. |
| Battery, radio, phone | No battery; NFC only; thick cases can block scans. (Tangem) | Most models: battery, Bluetooth; Nano S Plus: USB. (Ledger) | Safe 7: battery, Bluetooth; Safe 3/5: USB-C. (Trezor) | Nothing to charge, but no NFC phone means no wallet. |
| Where to buy | tangem.com or its reseller list. (Tangem) | ledger.com or its reseller list. (Ledger) | Trezor shop, Amazon storefront or reseller list. (Trezor) | Check the seller against the maker's list the day you buy. |
Every maker here has had a customer-data or app incident: Ledger's 2020 database leak, Trezor's 2026 shipping-provider leak, and Tangem's December 2024 support-log bug. (Tangem)
Tangem seed phrase or not: which setup is safer?
Tangem itself says "neither model is unconditionally safer." (Tangem) Tangem with no seed phrase means guarding cards, not words.
- Seedless (the default). The card's chip makes the key and never shows it. Your backup is the other cards; the risk is losing all of them. (Tangem)
- With a seed phrase. Tangem says "the Tangem application selects 12 (or 24) random words." So the words are made and shown on an internet-connected phone. You gain restoring in other standard wallets. (Tangem)
- Why it matters. Tangem's December 2024 logging bug hit only seed-phrase users who contacted support in-app within 7 days. Tangem fixed it (iOS 5.19.1, Android 5.19.2) and told them to move funds and reset. (Tangem; Cointelegraph)
- Importing an old phrase means typing it into a phone. [Our framing: that breaks the setup rule to never type your phrase into a phone or computer.]
- No switching later. You can't add a phrase to a seedless wallet without moving funds and resetting every card. (Tangem)
Choose seedless if you'll reliably keep 2–3 cards in separate safe places and are fine restoring only with Tangem cards. Choose a seed phrase only if you need to restore in another wallet, and then treat those words like any recovery phrase: paper or metal, never photographed, never typed anywhere else. [Our advice, built on Tangem's documented tradeoffs.]
Has Tangem been hacked? What the 2024–2026 research found
We found no report of a remote attack that stole funds from a Tangem card, and Tangem says it has never had one. Ledger's security lab, Donjon (Ledger competes with Tangem), has published three findings, each shown here with Tangem's reply.
| Date (public) | Finding | Tangem's response | What it means for you |
|---|---|---|---|
| 2025-05-15 | Donjon: an Android app bug let a counterfeit card pass the genuine check (CVE-2025-27839). (Donjon) | Fixed the next day in 5.18.3 and paid a bounty, per Donjon. Tangem's changelog calls exploitation "impossible to implement in real-life scenarios"; NVD says it "may not have been possible." (Tangem; NVD) | Update the app before setting up a card. |
| 2025-09-17 | Donjon: a "tearing" trick skips the wrong-guess wait, about 2.5 guesses per second on a card in the attacker's hands. (Donjon) | Not a vulnerability: it damages the chip, and the research "focuses on 4-digit PINs." (Tangem) | Use a long code: Donjon advises 8+ mixed characters. |
| 2026-07-09 | Donjon: a laser attack resets the access code on cards "currently in circulation." Physical, invasive, about $250,000 of gear, about 2 hours per card once tuned. (Donjon) | "Not scalable"; needs decapping and lab tuning. (Tangem; The Block) A Keysight review commissioned by Tangem (2026-10-26) found "no significant flaws that would put customer assets in immediate danger"; it doesn't address the laser attack. (Keysight, commissioned by Tangem) | Matters only if someone gets your card. [Our advice: if one goes missing, move funds.] |
| 2024-12-31 | Tangem's own disclosure: the app logged private keys for some seed-phrase users. | Under 0.1% of users; no funds lost. (Tangem) | Seedless users weren't affected. |
"The only real risk is a lost or stolen card; if yours stays in your possession, the attack described here cannot be performed."
"LFI attacks are not scalable, and for everyday users, the practical risk is virtually non-existent."
None of these let someone take your crypto from a distance. Two make a lost or stolen card more dangerous than Tangem's marketing suggests, and with no firmware updates, they stay that way. That's our read on Tangem security. For Ledger, see Ledger's own incident timeline.
Where should I buy a Tangem, Ledger or Trezor?
- From the maker first: tangem.com, ledger.com, or Trezor's shop or Amazon storefront. See where to buy a Trezor or a Ledger. (Tangem)
- Otherwise, only an authorized reseller on the maker's list, checked the day you buy: Tangem's reseller list (scroll to "Tangem resellers"), Ledger's reseller list, Trezor's authorized resellers. Is Tangem on Amazon safe? Only from the store Tangem lists: "TANGEM OFFICIAL." (Tangem)
- First tap on a Tangem must ask you to create a wallet. Already activated, or came with an "initialization password"? Don't use it; reset it and report the seller. (Tangem; Tangem)
- Never used, returned, "pre-configured" or half price, for any brand.
- Set it up yourself. Ledger or Trezor: our hardware wallet setup checklist. [Our advice for Tangem: update the app, set a long access code, split the cards up.]
Measured, 2026-10-27: after the Ledger implant news, is it safe to buy a Tangem card from Amazon or a reseller? Buy a Tangem only from tangem.com or a seller on Tangem's own reseller list (on Amazon, the store Tangem lists is "TANGEM OFFICIAL"), update the Tangem app before the first scan, and make sure the card asks you to create a new wallet. Tangem says its genuine check makes cards safe to buy anywhere, but that check had a bug on Android until late 2024.
What we found: Tangem says a card "would even be totally safe to buy in an underpass," if the official app is installed and the card prompts you to create a wallet. (Tangem) Its Android check once accepted counterfeits; in February 2025, per Donjon, Tangem said 30% of users hadn't updated. (Donjon) Tangem warns of pre-activated sets on third-party sites. (Tangem) Its US reseller list includes, besides Amazon and Best Buy, 8 small-seller entries: one listed by an eBay item link, one Etsy shop and two with Gmail contacts (re-counted 2026-10-28). That's a fact about the list, not a claim about any seller. (Tangem) None of the 5 results we checked for "is tangem safe to buy on amazon" mentioned the bug.
How we checked: top five results for four Tangem searches on 2026-10-27 (our search tool's order, not Google rank), read in context; Tangem's US reseller list re-counted 2026-10-28. We didn't buy or test any cards.
Which should I pick for my situation?
| Your situation | What matters most | Leaning |
|---|---|---|
| You worry you'd lose or leak a written phrase | No phrase to guard | Tangem seedless, if you'll keep 2–3 cards in separate places. (Tangem) |
| You want to check addresses on a screen your phone can't control | A device screen | Ledger or Trezor. |
| You use DeFi apps or sign token approvals | Readable signing on the device | Ledger or Trezor: Trezor vs Ledger by situation. [Our inference: a card shows requests only on the phone.] Know how drainers use approvals. |
| You want to restore in any standard wallet | A standard recovery phrase | Ledger, Trezor, or Tangem with a seed phrase. |
| You worry most about device theft | PIN wipe, patchable firmware | Ledger or Trezor. On Tangem: long code, cards apart. |
| You want nothing to charge | No battery | Tangem card or ring. |
| You want auditable code | Open firmware | Trezor fits most closely; Tangem's firmware is closed. |
| You can only buy from a marketplace or local store | Supply chain | Whichever brand lists that exact seller today. |
We don't pick a winner. Any of the three, bought from the right place and set up by you, beats keeping keys on a phone, a laptop or an exchange. Comparing devices? Our hardware wallet guide is the separate, labeled product page.
Should I switch from Ledger to Tangem after the implant news?
- Not because of the news alone. The October 2026 implants were added to genuine Ledgers in resale; Ledger says its chip and OS weren't the problem. Bought from Ledger or a listed reseller? Nothing changed.
- If you bought your Ledger from a non-official seller, move funds to a new wallet with new keys, any brand.
- What Tangem changes. See how the implant read the 24 words off the screen. A seedless card never shows a phrase. [Our inference, untested: that trick would have nothing to read.] But cards have their own buying risks (the counterfeit-check bug, pre-activated sets). (NVD; Tangem)
- Start fresh; don't import your Ledger phrase. [Our advice: exposed words stay exposed on a new card.] Anyone offering to "migrate" your wallet is running one of the fake wallet support scams.
Already bought one, or already lost funds?
- New device? Ledger or Trezor: the hardware wallet setup checklist. Tangem: the first-tap check in step 3.
- Ledger from an unlisted shop? See what to do if you bought your Ledger from a non-official seller.
- Typed your phrase, code or PIN somewhere? Move funds now: the first 30 minutes after a drain, then seed phrase phishing.
- Lost one Tangem card? The others still work. (Tangem) [Our advice: if your code was short, move funds to a new set.]
- Lost every card, no seed phrase? Tangem says no one can recover the funds; anyone who claims otherwise is running one of the crypto recovery scams. (Tangem)
- Lost funds? Then report the crypto scam in this order, with our evidence template.
- A letter, call or "Tangem support number"? Tangem says it has no phone support and never sends letters: fake wallet support scams. (Tangem)
Frequently asked questions
Is Tangem safe?
Tangem keeps your private key on a certified secure chip inside a card, and we found no report of a remote attack stealing funds from one. Its tradeoffs: there's no screen, so you check transactions on your phone; losing every card without a seed phrase loses the funds; and the firmware can't be updated, so physical attacks published in 2025 and 2026 can't be patched. Buy it from Tangem or a listed reseller and use a long access code.
Is Tangem safer than Ledger or Trezor?
Not clearly; each moves risk to a different place. Ledger and Trezor show transactions on their own screen and use a standard recovery phrase, while Tangem has no screen and replaces the phrase with 2–3 identical cards by default. For most people, where you buy, never typing your backup anywhere, and reading what you approve matter more than the brand. Ledger and Trezor are compared in our Trezor vs Ledger table.
Should I set up Tangem with a seed phrase or without?
Without is Tangem's default: the key is created on the card and never shown, and your backup is the other cards. With a seed phrase, the Tangem phone app generates the words, so you can restore in other wallets, but you must guard those words like any recovery phrase. In December 2024, a Tangem logging bug affected only seed-phrase setups.
What happens if I lose my Tangem card?
If you still have another card from your set, it gives full access, because all cards are equivalent. If you lose every card and didn't create a seed phrase, Tangem says the funds can't be recovered by anyone, including Tangem. You can't add more backup cards to an existing wallet later.
Can someone steal my crypto if they find my Tangem card?
They need your access code. Tangem slows repeated wrong guesses, but Ledger's security lab, a Tangem competitor, showed in 2025 that the delay can be bypassed, and in 2026 that a laser lab it says costs about $250,000 can reset the code. Tangem disputes how practical both are. Use a long access code, keep cards apart, and move funds if a card goes missing.
Has Tangem ever been hacked?
Tangem says none of its devices has been compromised, and we found no report of a remote attack stealing funds from one. It did fix a December 2024 app bug that logged some seed-phrase users' private keys, and a 2024 Android bug that could let a counterfeit card pass its genuine check. Ledger's security lab has also published two physical attacks on cards in an attacker's hands, which Tangem says are impractical.
Is it safe to buy a Tangem wallet on Amazon?
Buy only from the Amazon store Tangem lists ("TANGEM OFFICIAL") or another seller on Tangem's reseller list, and update the Tangem app before setup. On first scan, the card must ask you to create a wallet. If it's already activated or came with an "initialization password," don't use it.
Does a Tangem card need a battery or a special phone?
No battery: the card wakes up when you hold it to the phone's NFC area. You need an NFC-capable phone with the Tangem app, and thick or metal cases or other NFC cards nearby can block scanning.
Is there a Tangem support phone number?
Tangem says it doesn't offer phone support, never sends letters, and won't contact you first about wallet security. A "Tangem support number" or a support message on Telegram or Discord is a scam; contact Tangem only through the channels listed on its own site.
What to do next
Comparing Tangem, Ledger or Trezor? Buy only from the brand's own store or its listed authorized resellers (Tangem's list, Ledger's list, Trezor's list), then set it up with our hardware wallet setup checklist. For Ledger vs Trezor in depth, read our two-way comparison. Comparing devices? Our hardware wallet guide is the separate, labeled product page. Already lost funds to fake support or a tampered device? Report the crypto scam in this order.
Get one crypto scam warning a week from Pause Before Send: join the newsletter.
No affiliate links, exchange referrals or coin calls on this page, by policy. We have no affiliate or referral deal with Tangem, Ledger or Trezor. Store links go to each maker's own reseller list.
Sources
- Tangem Help Center, "Tangem Wallet Overview" (living page). tangem.com (accessed 2026-10-27)
- Tangem Help Center, "How to Back Up to iCloud or Google Drive" (living page; Tangem Mobile Wallet only). tangem.com (accessed 2026-10-28)
- Tangem Help Center, "How Backup Works" (living page). tangem.com (accessed 2026-10-28)
- Tangem Help Center, "Private Key Security" (living page). tangem.com (accessed 2026-10-27)
- Tangem Help Center, "All About Seed Phrases" (living page). tangem.com (accessed 2026-10-27)
- Tangem Learning Hub, "Seed Phrase vs Seedless Wallet: What's Actually Safer?" (undated; company article). tangem.com (accessed 2026-10-27)
- Tangem Help Center, "All About Access Code" (living page). tangem.com (accessed 2026-10-27)
- Tangem Help Center, "Firmware & Authenticity" (living page). tangem.com (accessed 2026-10-27)
- Tangem Help Center, "Before you buy FAQs" (living page). tangem.com (accessed 2026-10-27)
- Tangem, "Partnership program," section "Tangem resellers" (living page). tangem.com (accessed 2026-10-28)
- Patrick Dike-Ndulue, "Scam Alert: How to Identify and Avoid Pre-Activated Wallets," Tangem Blog, 2025-10-03. tangem.com (accessed 2026-10-27)
- Tangem Help Center, "How Phishing Attacks Work" (living page). tangem.com (accessed 2026-10-27)
- Tangem Help Center, "Scanning Issues" (living page). tangem.com (accessed 2026-10-27)
- Rukkayah Jigam, "Is Tangem Safe? Security Audits and Certifications (2026)," Tangem Learning Hub, 2026-07-22. tangem.com (accessed 2026-10-27)
- Tangem, "Security audits" (living page; links one- and two-page audit summaries). tangem.com (accessed 2026-10-27)
- Kudelski Security, "Audit of Tangem's smartcard wallet code," 2018-08-06. kudelskisecurity.com (accessed 2026-10-27)
- Patrick Dike-Ndulue, "Tangem Identifies and Resolves Potential Vulnerability," Tangem Blog, 2024-12-31. tangem.com (accessed 2026-10-27)
- Arijit Sarkar, "Tangem fixes bug exposing user seed phrases via email," Cointelegraph, 2024-12-31. cointelegraph.com (accessed 2026-10-27)
- Ledger Donjon (Ledger competes with Tangem), "Tangem Genuine Check Bypass on Android Application," 2025-05-15. ledger.com (accessed 2026-10-28)
- NIST National Vulnerability Database, CVE-2025-27839. nvd.nist.gov (accessed 2026-10-27)
- Tangem, "Firmware & app changelog," entry "Tangem Wallet App Update v5.18.3," 2024-11-28 (living page). tangem.com (accessed 2026-10-28)
- Ledger Donjon (Ledger competes with Tangem), "The Vulnerability Exposing Tangem Cards to Brute-Force Attacks," 2025-09-17. ledger.com (accessed 2026-10-27)
- Tangem team, "Are Tangem Cards Vulnerable to Brute-Force Attacks?," Tangem Blog, 2025-09-17. tangem.com (accessed 2026-10-28)
- Baptistin Boilot, "Bypassing Tangem Card Security with a Laser Attack," Ledger Donjon blog (Ledger competes with Tangem), 2026-07-09. donjon.ledger.com (accessed 2026-10-28)
- Andrey Kurennykh, "Our Comment on Ledger Donjon's Latest Article," Tangem Blog, 2026-07-09. tangem.com (accessed 2026-10-28)
- Keysight Device Security Lab (commissioned by Tangem), "Approaching Effective Crypto Wallet Security Evaluation," Keysight blog, 2026-10-26. keysight.com (accessed 2026-10-28)
- Brian Danga, "Ledger researchers disclose Tangem card flaw; Tangem says risk to everyday users is 'virtually non-existent'," The Block, 2026-07-10, updated 2026-10-19. theblock.co (accessed 2026-10-27)
- Tangem, referral program page (living page; cited only to show the program exists). tangem.com (accessed 2026-10-27)
- Ledger Academy, "What Is Ledger Recovery Key?," 2025-07-24. ledger.com (accessed 2026-10-27)
- Ledger, "Hardware wallets comparison" (living page). shop.ledger.com (accessed 2026-10-28)
- Trezor, "Compare wallets" (living page). trezor.io (accessed 2026-10-28)
- Ledger, "Find a Ledger Reseller around the world" (living page). ledger.com/reseller (accessed 2026-10-27)
- Trezor, "Authorized Resellers" (living page). trezor.io/resellers (accessed 2026-10-27)
Method note: every Tangem, Donjon, NVD and news claim above comes from a page we opened on 2026-10-27; the Donjon and Tangem laser-attack posts, Donjon's genuine-check post, Tangem's brute-force reply, backup and reseller pages, and the Ledger and Trezor comparison pages were re-opened 2026-10-28. Ledger and Trezor cells without their own citation are carried from our Trezor vs Ledger page, sourced 2026-10-25. Each company's page argues for its own design, and Ledger's lab researches a competitor, so treat both sides as advocacy. We left out prices, coin counts, device counts and model specs on purpose, and we didn't buy or test any wallets. The Keysight review cited above was commissioned by Tangem; it publishes a summary result, not a full report.
Changelog
- 2026-10-28: Added link to how to check a wallet address.
- 2026-10-28: First published. Tangem, Ledger Donjon, NVD, Ledger, Trezor and news sources checked 2026-10-27; Donjon, Tangem, Keysight, reseller-list, Ledger and Trezor pages re-checked 2026-10-28.