Good news for Tangem holders: your assets remain fully secure. The Coldcard case is not relevant to Tangem.
Their issue lies in their proprietary firmware and a random flaw specific to certain devices. Tangem runs on entirely separate code and does not use or share any part of that implementation. Here is why:
1. At Tangem, private keys are generated entirely inside the EAL6+ certified Samsung Secure Element using its built-in hardware True Random Number Generator (TRNG). The key is created inside the chip and never leaves it.
2. Beyond certified hardware, Tangem’s firmware and security architecture have been independently audited by Kudelski Security, Riscure, Cure53 Laboratories, with particular focus on secure private key generation, storage, and usage.
Learn more about how Tangem generates entropy:
https://tangem.com/en/blog/post/generating-entropy-for-private-keys/
Their issue lies in their proprietary firmware and a random flaw specific to certain devices. Tangem runs on entirely separate code and does not use or share any part of that implementation. Here is why:
1. At Tangem, private keys are generated entirely inside the EAL6+ certified Samsung Secure Element using its built-in hardware True Random Number Generator (TRNG). The key is created inside the chip and never leaves it.
2. Beyond certified hardware, Tangem’s firmware and security architecture have been independently audited by Kudelski Security, Riscure, Cure53 Laboratories, with particular focus on secure private key generation, storage, and usage.
Learn more about how Tangem generates entropy:
https://tangem.com/en/blog/post/generating-entropy-for-private-keys/