Ledger Donjon disclosed a laser fault injection attack that can reset Tangem card passwords by bypassing a recovery-state check in Tangem’s firmware running on an EAL6+ secure element.Tangem disputed the practical significance of the findings, highlighting the attack requires expensive laboratory equipment, physical possession of the card, and specialized expertise.