Tangem appeals to the lowest common denominator in crypto, that's why it's filled with bagholders from $XRP $KAS and affiliates paid peanuts to shill. I will make it simple for people to understand today. In December 2024, @Tangem had a critical vulnerability where its mobile app wrote users' PRIVATE KEYS into logs that got attached to support emails. They deleted early warning posts on Reddit. Inb4 "muh seedless, muh safe", yes, your keys never touch the app. Your TRANSACTIONS touch it every single time. The attack vector is the APP ITSELF and the OS it runs on. Read on. Tangem's Nirvana Fallacy is: seatbelts have occasionally failed, therefore remove seatbelts. Ledger/Trezor clear-signing bug: worst case, the screen lies about transaction parameters. Tangem's design: the (phone) screen can lie about transactions as the permanent baseline. >"Hardware Implant" Physical implants predate Bitcoin. They are device agnostic. The phone on which Tangem's app runs could have an implant too, what then? "Tangem Genuine Check" was exploited by Ledger already. Counterfeit Tangem Cards are not just theoretical: ledger.com/tangem-genuine-ch… >"Clear Signing Bugs" Clear-signing bugs are a failure of a layer Tangem doesn't have at all. Tangem signs whatever payload the app hands it, every time, by design. Car airbags have defects, even from Toyota, the most reliable car manufacturer that exists. Tangem's solution is to remove airbags altogether. Both Ledger and Trezor vulnerabilities are routinely patched. You can never patch your laser vector: donjon.ledger.com/blog/bypas… Or tearing vector: ledger.com/blog-brute-force-… ...because there's no update channel for users. Your security page still advertises resistance to "fault injection attempts". Donjon's laser attack IS fault injection. It works and it's unpatchable by you. [Eureka Moment] @Ledger and @Trezor clear signing bugs were discoverable BECAUSE the trusted display can be audited against what it signs. In Tangem's model, there's nothing to audit. Read that back slowly because it's easy to miss. It's evidence the architecture is testable. Ledger/Trezor is like bank that publishes audited accounts. It will occasionally have an auditor find an error: 1. Construct a transaction. 2. Record what the device displays. 3. Record what the device actually signs (the signature reveals exactly what was signed). 4. Compare the two. Tangem is a bank that keeps no books. Therefore it will never have an accounting error found: 1. Construct a transaction. 2. Record what the app displays. 3. Record what the card signs. 4. They differ: the app showed one address, the card signed another. In Tangem's case, there's no vulnerability because Tangem never promised those two things should match. The card signs whatever payload the app hands it. The system is working exactly as designed. It's the default behavior for a compromised OS. >"And more hardware components can introduce more attack vectors." So your solution to a purpose-built trusted display driven by minimal firmware (Ledger/Trezor) is a whole ass smartphone, running a full OS, with millions of lines of code and attack vectors. Genius. >"muh security hardened app" You never replied to my original post here because you can't: xitter.cf/HalesFall/status/20767… Tangem was also audited by Riscure in 2023, yet you still got smoked by Ledger later: tangem.com/en/blog/post/tang… Not even Apple or Google can defend an app from a kernel-level exploit on their own OS, that's why Ledger/Trezor don't try. They verify OUTSIDE the blast radius. Your "hardened app" lives inside it. [Latest Exploits] See the videos attached, there's tons more I haven't included. You have neither the money, resources, or expertise to defend from OS exploits. How many of your users are even using Pixel 8 series and later, or iPhone 17 series and later? That matters greatly too. Your "app" layer is dead-on-arrival. Ledger & Trezor provide mitigation where you cannot. Tangem is more akin to a software wallet because it implicitly trusts a compromised OS. The secure element is theatre since the card will sign anything passed to it.