# Tangem Wallet custody score: 66% | TradingAgentStack

> Tangem Wallet by Tangem: custody score 66% from sourced facts on supply chain, key protection, signing, customer data and incidents. Checked 2026-11-05.

Canonical: https://tradingagentstack.com/custody/tangem/

1. [Home](https://tradingagentstack.com/)

2. [Custody](https://tradingagentstack.com/custody/)

3. Tangem Wallet

# Tangem Wallet: custody score 66%

Tangem · Multi-asset · checked 2026-11-05. 56 of 85 points from sourced facts.

[Official store (tangem.com) →](https://tangem.com/)

## Score, input by input

| Input | What we found | Points | Source |
| --- | --- | --- | --- |
| Supply chain and authenticity Genuine-device check | In the app: The Tangem app verifies the card and its firmware automatically before any operation. | 10/10 | [source](https://tangem.com/en/learning-hub/post/how-to-verify-hardware-wallet-tampered/) |
| Supply chain and authenticity Official reseller list | Published: Authorized resellers listed on tangem.com. | 5/5 | [source](https://tangem.com/en-GB/help-center/before-you-buy-faqs/) |
| Supply chain and authenticity Tamper evidence | Strong: Monolithic chip card: Tangem says the card and its software can't be physically modified. | 5/5 | [source](https://tangem.com/en/help-center/before-you-buy-faqs/) |
| Supply chain and authenticity Response to reseller incidents | No incident: None on record. | 5/5 | — |
| Key protection Secure element | Certified (EAL): Samsung secure element certified EAL6+. | 6/6 | [source](https://tangem.com/en/learning-hub/post/is-tangem-safe/) |
| Key protection Open firmware | Closed, audited: Card firmware is closed and can't be updated; audited by Kudelski (report not public). The app is open source. | 2/9 | [source](https://kudelskisecurity.com/research/audit-of-tangems-smartcard-wallet-code) |
| Signing safety Own screen to check what you sign | No screen: No screen: you review the transaction in the phone app, then tap the card. | 0/15 | [source](https://cryptoslate.com/products/tangem/) |
| Customer data exposure (36 months) Customer data | None found: No customer-data breach found for the last 36 months. | 15/15 | none found |
| Incident record (24 months) Security incidents | Flaw, no losses: July 2026: Ledger Donjon showed a lab laser attack that resets a card's password; Tangem can't patch it, and says the risk to ordinary owners is near zero. | 8/15 | [source](https://forklog.com/en/news/ledger-researchers-uncover-physical-attack-method-on-tangem-wallet) |

## Incidents

- **2026-07-10** Lab laser fault-injection attack resets the card password (physical access, ~$250k equipment); unpatchable. [source](https://forklog.com/en/news/ledger-researchers-uncover-physical-attack-method-on-tangem-wallet)

## Where to buy safely

- Buy from the maker: [tangem.com](https://tangem.com/).

- Resellers: Authorized resellers listed on tangem.com. [source](https://tangem.com/en-GB/help-center/before-you-buy-faqs/)

- On arrival: check the packaging, run the genuine-device check, and reject any device that already has a PIN or recovery phrase set.

## Keep it away from your bots

A hardware wallet is the vault. Don't connect it to a trading bot, an API key or an agent wallet: give the bot a separate trading float and sweep profits back to the vault's address. [How to split vault, float and sweeps](https://tradingagentstack.com/custody/#tiers). [Set up Tangem Wallet as cold storage, step by step](https://tradingagentstack.com/cold-storage/).

## Questions

### Is Tangem Wallet safe?

Tangem Wallet scores 66% on our custody score (56 of 85 points from sourced facts, checked 2026-11-05). Weakest point: No screen: you review the transaction in the phone app, then tap the card.

### Has Tangem had a security incident?

July 2026: Ledger Donjon showed a lab laser attack that resets a card's password; Tangem can't patch it, and says the risk to ordinary owners is near zero.

### Where should I buy Tangem Wallet?

From the maker's store (tangem.com). Resellers: Authorized resellers listed on tangem.com. On arrival, run the genuine-device check and reject any device that already has a PIN or recovery phrase set.

## Other hardware wallets, scored
[OneKey Pro: 94%](https://tradingagentstack.com/custody/onekey/)[BitBox02 Nova: 89%](https://tradingagentstack.com/custody/bitbox/)[Blockstream Jade Plus: 79%](https://tradingagentstack.com/custody/blockstream-jade/)[Trezor Safe 5: 78%](https://tradingagentstack.com/custody/trezor/)[CoolWallet Pro: 72%](https://tradingagentstack.com/custody/coolwallet/)[Foundation Passport Prime: 66%](https://tradingagentstack.com/custody/foundation-passport/)[Keystone 3 Pro: 54%](https://tradingagentstack.com/custody/keystone/)[Coldcard Q: 49%](https://tradingagentstack.com/custody/coldcard/)[Ledger Flex: 49%](https://tradingagentstack.com/custody/ledger/)

[All hardware wallets, scored](https://tradingagentstack.com/custody/) · [Is this seller authorized?](https://tradingagentstack.com/custody/#reseller-check) · [How we score](https://tradingagentstack.com/custody/#method)

## For agents

- [When to use this site, and the page index](https://tradingagentstack.com/llms.txt)
- [Sitemap](https://tradingagentstack.com/sitemap.xml)
- [Contact](https://tradingagentstack.com/contact/)
- [MCP server](https://tradingagentstack.com/mcp/)
- [MCP discovery](https://tradingagentstack.com/.well-known/mcp)