TANGEM WALLET: An Innovative Seedles Cold Wallet Setup

[Pmalek]

I’d like to highlight one feature of Tangem that I personally find valuable, i.e.commission-free stablecoin swapping. This is made possible through the Changelly platform

Commission-free swaps seem attractive at first but using a service like Changelly to do it through doesn't. Like ChangeNOW, those are selective scammers. They are legit enough to not be called complete scammers but love to hustle their users every now and then and when the spoils are worth the negative press. I would be very careful with them, and use them with small amounts only and as a last resort if there was no better service around for the same swap I needed to do.

[fillippone]

I’d like to highlight one feature of Tangem that I personally find valuable, i.e.commission-free stablecoin swapping. This is made possible through the Changelly platform

Commission-free swaps seem attractive at first but using a service like Changelly to do it through doesn't. Like ChangeNOW, those are selective scammers. They are legit enough to not be called complete scammers but love to hustle their users every now and then and when the spoils are worth the negative press. I would be very careful with them, and use them with small amounts only and as a last resort if there was no better service around for the same swap I needed to do.

It always depends on the feature required by the wallet.
I wouldn’t find this useful, as I don’t use the token swapping inside the wallet.
Also, the more you use that wallet, the more you understand which feature are Uruk for your particular seeeeer

[satscraper]

I’d like to highlight one feature of Tangem that I personally find valuable, i.e.commission-free stablecoin swapping. This is made possible through the Changelly platform

Commission-free swaps seem attractive at first but using a service like Changelly to do it through doesn't. Like ChangeNOW, those are selective scammers. They are legit enough to not be called complete scammers but love to hustle their users every now and then and when the spoils are worth the negative press. I would be very careful with them, and use them with small amounts only and as a last resort if there was no better service around for the same swap I needed to do.

Wow, thanks for warning. I didn’t know about this. I’ve used Tangem’s built-in swapping feature a few times and everything went smoothly those times, so I thought the services they use were quite reliable. I didn’t swap large amount ^{no more than $100} but now I’ll definitely think twice before doing it again. It might be better to not paying attention on zero commissions they offer and just use external exchange services instead.

[babo]

I’d like to highlight one feature of Tangem that I personally find valuable, i.e.commission-free stablecoin swapping. This is made possible through the Changelly platform

Commission-free swaps seem attractive at first but using a service like Changelly to do it through doesn't. Like ChangeNOW, those are selective scammers. They are legit enough to not be called complete scammers but love to hustle their users every now and then and when the spoils are worth the negative press. I would be very careful with them, and use them with small amounts only and as a last resort if there was no better service around for the same swap I needed to do.

Thanks for the heads up. I was always afraid these people might be this smart. Or pretend to be smart.
I don't take any risks because I don't have large amounts, but I've always asked myself the question: if someone were to exchange, I don't know, 10 bitcoins, would they still do the exchange?
You answered me.

[libert19]

^ You talk of 10 Bitcoins, meanwhile I can't trust these instant exchanges even with single exchange of 10k usd.

I’d like to highlight one feature of Tangem that I personally find valuable, i.e.commission-free stablecoin swapping. This is made possible through the Changelly platform

Commission-free swaps seem attractive at first but using a service like Changelly to do it through doesn't. Like ChangeNOW, those are selective scammers. They are legit enough to not be called complete scammers but love to hustle their users every now and then and when the spoils are worth the negative press. I would be very careful with them, and use them with small amounts only and as a last resort if there was no better service around for the same swap I needed to do.

Wow, thanks for warning. I didn’t know about this. I’ve used Tangem’s built-in swapping feature a few times and everything went smoothly those times, so I thought the services they use were quite reliable. I didn’t swap large amount ^{no more than $100} but now I’ll definitely think twice before doing it again. It might be better to not paying attention on zero commissions they offer and just use external exchange services instead.

Nothing should happen with hundred dollars or even few thousand I guess, as Pmalek said — spoils must be worth negative press — they would not want to ruin their name for little amounts.

[satscraper]

^ You talk of 10 Bitcoins, meanwhile I can't trust these instant exchanges even with single exchange of 10k usd.

I’d like to highlight one feature of Tangem that I personally find valuable, i.e.commission-free stablecoin swapping. This is made possible through the Changelly platform

Commission-free swaps seem attractive at first but using a service like Changelly to do it through doesn't. Like ChangeNOW, those are selective scammers. They are legit enough to not be called complete scammers but love to hustle their users every now and then and when the spoils are worth the negative press. I would be very careful with them, and use them with small amounts only and as a last resort if there was no better service around for the same swap I needed to do.

Wow, thanks for warning. I didn’t know about this. I’ve used Tangem’s built-in swapping feature a few times and everything went smoothly those times, so I thought the services they use were quite reliable. I didn’t swap large amount ^{no more than $100} but now I’ll definitely think twice before doing it again. It might be better to not paying attention on zero commissions they offer and just use external exchange services instead.

Nothing should happen with hundred dollars or even few thousand I guess, as Pmalek said — spoils must be worth negative press — they would not want to ruin their name for little amounts.

Agreed. That's why I'm swapping no more than a couple of hundred at a time. I know Tangem isn't the only wallet that relies on Changelly many online exchanges also use its swapping service. Even some crypto card providers depend on it, so any loss of reputation would be extremely costly for Changelly's business.

BTW, Tangem allows to select a few other services at swapping.

 

[fillippone]

According to Tangem's CTO, the TANGEM WALLET is safe from the latest Supply Chain attack:




Discover more here:

Ledger CTO warns of a potential mass attack taking place

[babo]

the incredible thing is how many packages are involved and above all how much time it took them to set this thing up
This is why the open source world needs those who benefit and profit from it to get some money back.

It seems to me like the problem that arose months ago with libxz which introduced a backdoor, because they are few and voluntary and nobody puts money into it

[dkbit98]

According to Tangem's CTO, the TANGEM WALLET is safe from the latest Supply Chain attack

Andrey Lazutkin is basically saying Trust Me Bro to his customers, just like they trusted him when keys got leaked over their tangem app
It's interesting to see how closed source devices are one the first to say that everything is fine and they are not affected.

[satscraper]

According to Tangem's CTO, the TANGEM WALLET is safe from the latest Supply Chain attack:




Discover more here:

Ledger CTO warns of a potential mass attack taking place

I believe hackers do not use constant addresses and tend to change them frequently. Because of this Blockaid's database might struggle to keep the pace with hackers' addresses which leads me to assume that connecting to Web3 wallets via Tangem's WalletConnect may still not be entirely safe. As for Tangem's own services, I believe they are safe, primarily because they don't rely on JavaScript frameworks.

[fillippone]

I believe hackers do not use constant addresses and tend to change them frequently.

In this specific case, the address list was hardcoded in the libraries: the program then selected the address best matching the original one to deceive the user in using a visually similar, but diffrent address.

[satscraper]

I believe hackers do not use constant addresses and tend to change them frequently.

In this specific case, the address list was hardcoded in the libraries: the program then selected the address best matching the original one to deceive the user in using a visually similar, but diffrent address.

I understand that, but my remark was more general, i.e. relying on third party ^{like Blockaid} is the weak point for the Tangem as well as it is for any hardware wallet without its own display. Even if Blockaid’s techniques helped in this specific case, that doesn’t guarantee it will protect users in all situations. That’s why I never use WalletConnect when working with my Tangem.

[dkbit98]

Here we go, another proof that Tangem wallet is NOT SAFE to use, and it is vulnerable to brute force attacks.
Donjon team tested this and they provided plenty of information in their latest blog articles.
Weak 4 digit PIN is very easy to crack, so donjon team is recommending switching to stronger 8 digit PIN with 1 digit, 1 letter and 1 symbol.
For more information read the full article:
https://www.ledger.com/blog-brute-force-attack-tangem

PS
I would also remind everyone that Tangem is closed source, so they should switch to opensource alternatives like Satochip.
Satochip in combination with Seedsigner is 100 times better option for hardware wallet, and encrypted seed backup.

[satscraper]

Here we go, another proof that Tangem wallet is NOT SAFE to use, and it is vulnerable to brute force attacks.
Donjon team tested this and they provided plenty of information in their latest blog articles.
Weak 4 digit PIN is very easy to crack, so donjon team is recommending switching to stronger 8 digit PIN with 1 digit, 1 letter and 1 symbol.
For more information read the full article:
https://www.ledger.com/blog-brute-force-attack-tangem

PS
I would also remind everyone that Tangem is closed source, so they should switch to opensource alternatives like Satochip.
Satochip in combination with Seedsigner is 100 times better option for hardware wallet, and encrypted seed backup.

I had no doubt about that, even without Donjon team testers. Only the fools would choose 4-digit PIN for their hardware wallet. My Tamgem’s PIN is 12 digits long. Since I only use it for on-the-go operations and keep no more than few hundred EUR ^{(in crypto)} in it, I’m not too concerned about its closed-source nature. For larger sums I use Passport Core.

[dkbit98]

I had no doubt about that, even without Donjon team testers. Only the fools would choose 4-digit PIN for their hardware wallet. My Tamgem’s PIN is 12 digits long. Since I only use it for on-the-go operations and keep no more than few hundred EUR ^{(in crypto)} in it, I’m not too concerned about its closed-source nature. For larger sums I use Passport Core.

You are an exception from the rule.
I could bet that majority of people are using 4 digit pins, and they are probably using something like their birth year or date, don't ask me how I know that
Javacards are much safer option compared to tangem, they are already used in SIM cards, credit cards, Satochip, Keycard, etc.
  

[fillippone]

Here we go, another proof that Tangem wallet is NOT SAFE to use, and it is vulnerable to brute force attacks.
Donjon team tested this and they provided plenty of information in their latest blog articles.
Weak 4 digit PIN is very easy to crack, so donjon team is recommending switching to stronger 8 digit PIN with 1 digit, 1 letter and 1 symbol.

My pin is a combination of uppercase, number and symbol longer than 12 characters.
But I guess here, we just learned why a screen in a signing device is a non negotiable feature.

Rightly so, Tangem is suggested only for a few hundreds euros.

[satscraper]

Two days ago Tangem finally put the clarity into Tangem Pay which is designed to be the payment account inside Tangem Wallet app. This payment account "stays separate from your Tangem Wallet" .Tangem Pay account lets users hold USDC on Polygon and spend it instantly with virtual Visa card issued by Third National. ^{As I understand to spend from it  you need to top it up first.}

They also didn't highlight any specifically designed Tangem HW cards to work with this account, so I believe my three Tangem 2 cards will be eligible.^{Correct me if I'm wrong}.

Transactions signed by users who wish to spend on‑chain USDC via the Visa network will be also signed by Tangem’s partner, Rain, which in fact acts as mediator between Tangem Pay and Visa.

Rain will not have access to unspent balances. It is capable to handle ^{via key it holds} only transactions directed to merchants through related virtual Visa card.

P.S. They hope to launch it "across the UK and the European Union in early 2026"

[fillippone]

I haven't used Tangem for a while, and I see the lack of fees customisation remains: you can choose 1 or 2 sats/vb, not 1.1.
Given the current state of the blockspace market can make a difference.

[satscraper]

I haven't used Tangem for a while, and I see the lack of fees customisation remains: you can choose 1 or 2 sats/vb, not 1.1.

Yeah, and there is still no option to generate new receiving address. They promised to add this feature in Q3, if my memory serves me right.

BTW, they are now offering 10% discount on their products. For instance, the set of 3 Tangem cards for $62.91 ^$69.90 and the Tangem Ring for $135.00 ^$160.00.

[fillippone]

Here we go, another proof that Tangem wallet is NOT SAFE to use, and it is vulnerable to brute force attacks.
Donjon team tested this and they provided plenty of information in their latest blog articles.
Weak 4 digit PIN is very easy to crack, so donjon team is recommending switching to stronger 8 digit PIN with 1 digit, 1 letter and 1 symbol.
For more information read the full article:
https://www.ledger.com/blog-brute-force-attack-tangem

PS
I would also remind everyone that Tangem is closed source, so they should switch to opensource alternatives like Satochip.
Satochip in combination with Seedsigner is 100 times better option for hardware wallet, and encrypted seed backup.

Someone pointed to this channel, so I am sharing here a video that narrates the situation about the "tearing attack" discovered by Donjon:
 


Again, my suggestion is the same as dkbit98 and Cryptodad: harden your access code with longer words, numbers, and symbols.
Mandatory meme when discussing those issues: