u/TangemAG

- Top up via ACH or FedWire.
- Save and reuse trusted addresses with Address Book.
- Unlock Tangem Pay tiers with more cards, bigger daily limits and Visa benefits.
- Discover more updates across the app.

💡Easier to fund. Safer to send. More useful every day.

Gold hit $5,400 an ounce this year. Tokenized gold quietly became a $6B corner of crypto right alongside it.

💡$XAUt and $PAXG control 96-97% of the market. One offers monthly KPMG audits and NYDFS oversight, the other offers multi-chain access and deeper liquidity.

Which one fits your portfolio? We broke it down.

Read the full piece.

You open your wallet app, plug in your device, and a screen asks you to verify your recovery phrase. Everything looks real: the app, the device, and even the plug-in ports. But under the hood, something is really wrong.

💡This is SeedHunter, malware Kaspersky just documented. It waits on infected PCs for a hardware wallet to connect, then shows a phishing page inside the legitimate app. Hundreds of victims in 25+ countries, still active.

The attackers broke no encryption and cracked no chips. They just waited for humans to type the seed phrase. This is what real-world crypto theft looks like in 2026. If it can be typed, it can be stolen.

Tangem's seedless setup removes the weakness entirely: the key is born inside the chip and never exists as words. Nothing to type, copy, or hunt.

No seed, no SeedHunter. Research on the link.

SEI shut down its Cosmos infrastructure in favor of EVM

But there was a hiccup. While building, we found Cosmos-only cards had no EVM address to migrate to.

Here's what we did next:

1/ We started building EVM support the day the plan to shut down was announced.

2/ During testing, we found something SEI's own migration flow missed: some cards had no EVM address at all. For those users, the standard flow simply wouldn't work.

3/ We flagged it directly to the SEI team, and they updated the migration flow.

4/ Once SEI fully shuts down the Cosmos infrastructure, there's no longer any way to interact with that old address.

5/ Details on how to migrate are in our article.

Our comment on Ledger Donjon’s latest article. It describes a laser fault injection (LFI), a physical, lab-only attack technique that applies to secure elements in general, not something unique to Tangem.

It’s also worth noting that while Ledger Donjon presents itself as an independent research unit, it operates within Ledger, one of our largest competitors. Their findings should be read with that in mind.

What this attack actually takes:
· A lab setup costing $250K+ (by Donjon’s own estimate), with laser and side-channel equipment.
· Rare hardware security expertise and weeks of dedicated lab time.
· Clear intent to commit a targeted crime against one specific wallet, not something you can run at scale.
· Physical possession of the wallet, and it’s invasive, so it leaves visible damage.

Independent academic researchers who’ve studied LFIs extensively put it simply:
· Given enough time, funding and access, the firmware on any secure element can eventually be reverse-engineered and exploited.
· No product on the market can claim absolute resistance to sophisticated physical attacks, that’s a limitation of the underlying technology, not of any specific manufacturer.

Because of all that:
· LFI can’t be performed remotely.
· Doesn’t scale.
· For everyday users, the practical risk is virtually non-existent.

Full comment on our blog.

If yours is affected, don't just hop onto the next one, take your crypto off exchanges entirely.

💡With Tangem, the private keys for your assets are yours alone. You hold the keys and you approve every transaction. No exchange can freeze, restrict, or access your funds without your private keys.

MiCA changes the rules for exchanges. It doesn't change your right to hold your own crypto.