I was the one who spotted the bug and initially reported it on Reddit, though I later had to delete the post due to lot of people trying to message me, trying to login to my social media accounts. I’m glad Tangem addressed the issue swiftly and maintained communication with me throughout. I understand the concerns and apprehensions, but personally, I’m still using my Tangem with a seed phrase as it was an edge case which I agree and these things can happen. By the way, I bought my Tangem card thanks to your reviews!
Whoa! We have a Legend in the house!! Cool to see you here! Thanks for sharing that and dropping a comment! AND for helping make Tangem a better wallet! - Alex
@@cyberscrilla Thanks, mate! Honestly, I should be the one thanking you. Your reviews and videos on Tangem have been incredibly helpful in guiding my decision on which cold wallet to buy. This truly sets you apart from all the other TH-camrs I’ve watched. You’ve been a huge asset to the Tangem community. Keep up the great work, and more power to you! 🚀
@Ravzzy: I am getting more and more confused by the used terminology.... Tangem cleams a seedless setup... huh? I thought the private key was never supposed to leave the Secure Element Chip? I imagined the 1st card was providing the entropy, the app was generating a 12 word seed phrase, provide it to the first card and that card generates and stores the private key, never to reveal it. Then you move to create a backup, either you write down the 12 words or a second card it initialised with the 12 seed phrases, it generates and stores the identical private key, never to reveal it. Step 3 a third card might also generate the identical private key and store it (never to reveal it) as the second backup. How is the app able to see the private key in the first place? Does this not defeat the whole setup?
This article clearly outlines how the seedless operation works: tangem.com/en/blog/post/how-tangem-wallet-backs-up-private-keys/ And this one outlines the seed phrase operation: tangem.com/en/blog/post/seed-phrase-faq/
Timing is a funny thing. I had just bought a tangem wallet a few weeks ago. Haven’t taken the time to transfer my coins yet. Sometimes procrastination pays off!! Any way thank you for all your hard work. I really do believe you do this out of passion and i think people like you are the original reason for the internet.
I'm in the same boat, but one of my cards couldn't be scanned, so I'm currently in discourse with tangem now regarding the fault, they want me to video the problem so I waiting until after the holidays
Move your crypto to an exchange, reset your Tangem wallet to factory settings (blank slate status), install updated app, create new wallet, move your crypto back to the new, updated wallet. Got it.
Hi Grant, well I was having a problem with the second wallet and I did exactly what you just said I created a trust wallet moved all my funds to that wallet ready to reset the Tangem wallet and yes I got scammed. I think they call it dusting, and I lost everything, $65,000 scammed straight out the wallet everything I ever invested so I guess I’m done with crypto at this point in time.
@@ttkddry True, but an exchange is a safe place unless you have a verified 2nd wallet. Look at the comment below. I used to have a Trust wallet and the Pancake swap app created an open pathway that can easily be exploited and I lost $1,300 worth of crypto about 2 years ago. I won't use Trust wallet anymore since I don't trust it.
I used your discount code and ordered the Tangem Stealth wallet that should be arriving any day now. This video couldnt have been timed any better. Thank you.
Cyber Scrilla I would just like to say I appreciate all that you do to inform the community about different cold wallets. You are in my opinion a very trusted source. I hope people realize that. KEEP UP THE GREAT WORK!
I'm really happy you made this video. I didn't really think I was at risk but still lingered in the back of my mind. You definitely took some of that weight off. Your the best man.
🚨 Hey! Just a heads-up: I will never reach out to you directly on social media, and neither will Tangem. I do my best to keep the comments clear of spam and misinformation, but always stay vigilant and double-check anything suspicious! God bless, - Scrilla
Totally appreciate you being so open! Most definitely appreciate you putting out these videos!! You are clear and easy to understand. This old human is new to all of this crypto and even newer to wallets. SO thankful I came across your videos!! I had no idea you could loose your crypto 😢 Again THANK YOU!!!!
I want to thank you for taking the time to investigate and explain the situation. I used your referral link to buy the Tangem Wallet and activated my card in December. On the same day, I contacted support via the app. It was only through your channel that I learned about this security bug. This makes me question if a cold wallet offers any more security than a hot wallet.
They do. And you should definitely use a cold wallet. Whether it’s Tangem or another brand. Don’t risk your crypto because a bug scared you away. Be responsible.
I appreciate the transparency and security features that Tangem has put in place. I've just used your 10% discount code to order the ring and two-card set.
I purchased a Tangem wallet because a seed phrase wasnt required and hence the vunerabilty only began when they offered it due to market pressures. The original offering is still the best.
Even if Tangem goes bust, the app doesn’t magically disappear. It’d still be on your device. And the basic send/receive function of the app doesn’t rely on Tangem servers, so you’d still be able to at least transfer your crypto to a new a wallet (assuming you don’t have a seed) If you have a seed phrase, just import it into a new cold wallet and you’re good to go
As a relative newby (64yr old) to the crypto scene, I thoroughly enjoy your channel and have learned a lot from it. Thank you for your honesty and easy to understand explanations of crypto. I too have ordered the Tangem cards with your discount link. Thank you.
I got my Tangem wallet on Tuesday and it was either that same day or Wednesday that I saw a comment on one of your other videos about seed phrases being leaked. Luckily, not only did I NOT set a seed phrase, I also didn't contact support at any point, so I've been fortunate enough to avoid that bug. Either way, I'll still be using Tangem going forward and will NEVER use a seed phrase as there's too much risk involved with them. They're archaic and can actually be guessed and it'll only become more apparent once bad actors get hold of quantum computers when they eventually become cheap enough.
ummm a wallet still has a private key- you just dont see it, it stays in the security chip what will you do if tangem the company ever goes bust? no more Tangem app, no seedphrase to recover your funds GL
@1greenMitsi hopefully if that ever happens, I'd have already either cashed out completely or I'd be holding my crypto on an exchange and staking it securely once all of these new regulations kick in.
@@1greenMitsiNo, the source code for the API is available on GIT hub. Anyone can write their own app if the phone app becomes unavailable. ChatGPT will do it for you.
I would like them to acknowledge when deleting the emails that contained the keys did this include each and every backup since the data collection started? As a SYSADMIN I’ve been asked to do similar requests, it’s easy to delete the data from existing email systems but deleting it from months or years of backups can feel impossible depending on the service used If they have the ability to recovery a backup (and they likely do) then deleting the emails in the live system means nothing
This was the best vid I’ve seen yet about this incident, thank you. As a Tangem user and someone who has recommended this wallet to others, as I feel it’s the best on the market, glad to know this has been addressed and who specifically was affected.
I could definitely see this. Just like all the horror story about uphold. I see people all the time losing money on there. I almost stopped using it because, but I found a lot of it is people doing dumb shit on there account. If they ask you to update information than you should do it. People get locked out for using VPNs and not updating info when they ask for it. Some cases might be legit but I believe most is people not doing transactions right.
Just got the set of 3 cards using your link, after watching many of yours and other reviews, I made the decision mainly to put away my xrp. I also don't like how coinbase limited me to buy a lot of xrp at .55 cents back in November otherwise I would be around $120k to $200k on unrealized returns time to save my xrp and wait for 2027.
Exactly why I keep at least my BTC spread out over several hardware wallets. All from different manufacturers, too. The whole, "all your eggs in one basket" thing. Thanks for posting this, Scrilla. 👍
Private key should not leave the EAL chip, in fact it was copied into the app that is a really big red flag..🤔 And How do you make sure is not intended buy tangem? They dont have QA before?
Brother, you’ve made an excellent point, and it’s truly a massive red flag. If Tangem advertised that the private key never leaves the EAL chip, yet from day one, the implementation allowed it to be copied or accessed externally, that’s a blatant lie. Even more concerning is the fact that the support team reportedly has access to the long private seed. This suggests Tangem might actually have visibility into users' private keys. If true, this is a severe breach of trust and security. Such practices would directly compromise the very essence of a secure, decentralized wallet. It’s hard to trust a system where the core principle-keeping private keys private-is violated.
I agree. The keys never should have left the chip. I was under the impression this was how it works. I understand mistakes happen, but this is a huge mistake. I can’t help but think if they missed this, what else have they missed, and what aren’t they communicating to us? Personally, my trust is shaken.
I don't know if the private key(s) is/ are leaving the EAL chip per say, they are probably already entering the buggy logs while a new user gets or imports a seed phrase (the keys are generated following that). So the keys are getting stored on the cards and wrongly getting on some logs simultaneously?
Thank you for your clear explanation of what occurred with the tangem wallet. I bought tangem wallets, but haven’t used them yet, so I wasn’t affected. I love your videos, they’re easy to understand especially for anyone new to crypto. Thank you!
Hey bro, I really appreciate your honesty, and thank you for taking the time to explain everything-it can be so confusing, especially for newbies like me. I set up my Tangem wallet yesterday without any issues, all thanks to your videos. I truly appreciate the great info you provide, and don’t let the haters get to you. God bless you!
Thank you for this, I ordered my ring wallet a few days ago and waiting for to arrive, then heard about the bug and became mortified. Thinking have I wasted my money but that has put me at ease.
This exactly confirms my initial problems with deciding for Tangem. A secure wallet has to be air-gapped. I just don't trust my smartphone and afaik the concept of Tangem makes it necessary for the phone and app to work with the private key in some way. There are so many attack vectors.
Bro!!! I literally just set up my Tangem after finding your channel. I didn't have a seed phrase yet, so went with the non seed set up. 😅 thanks for covering this makes me feel better about my choice hahaha
Tangem should make a wallet for the desktop.. I just dont want allot of my stuff on a phone , maybe later if it gets very high in price I may carry a bit on it but I don't need it on a phone now .
It was your great reviews of Tangem that led me to purchase the wallet. I think it just boils down pure complacency! I will still use as they accepted the error, addressed it, fixed it, and did not try to hide the problem. Now, they need to address the internal problem that led to this and fast to keep from ever happening again.
Complacency can get the best of anyone!! Like everyone else I'm not happy about this issue; however, I feel that Tangem handled the situation appropriately. I agree that the issue should have never happened and Tangem kinda dropped the ball with testing, but it sounds like they have learned a valuable lesson. As far as Cyber Scrilla channel goes...keep up the good work! It is really obvious what you do and that you don't represent any of these companies. You do reviews on the products you own. I appreciate the information...and I too will continue to use and recommend Tangem. But, I will continuing to evaluate as time passes...but that goes for all of my wallets!
This is exactly what I mentioned in previous videos about the issue with these cards. It is not about just verifying transactions that you need a hardwallet. It is also about generating the key phrases that should not leave or generated on anything else other than the hardware wallet.
Yes and no. If all I had was a million, I wouldn’t put that on any one wallet, I’d diversify it across multiple wallets. If I was a mega millionaire, yes.
Thanks! I believe the BTC cards are on backorder according to the website, says shipping begins Jan 24. Not sure if that’s the case for your order though. But just be aware.
I know this is not related to what is being said here. But I use a separate prepaid phone for my crypto and I don’t do anything on that phone. No social media, no email no bill paying etc. Absolutely nothing. I haven’t even applied the prepaid minute card I purchased. I typically use WiFi with airplane mode on to check my progress. Hope this helps!!!
Yea, I think I'll be switching to a BTC only cold wallet and use another hardware "warm" wallet. Less coins = less code = less likely for vulnerabilities in an ever expanding code base.
@@cyberscrilla you helped me greatly with my choice of cold wallet. Ended up going with a Keystone 3 Pro. Have been following the Tangem situation on Reddit. Was hoping you’d post your thoughts soon. Thanks!
private keys stored in log files and automailed to tangem headquarters is no 'bug'. thats the one thing no wallet should ever do and undermines the primary reason to get a hardware wallet...
I ordered a Safe 5 after this whole debacle but will reset my cards and use it seedless from now on and treat it like my metamask I still think tangem is trustworthy and nothing beats the usability of it, its still a great wallet but not as a seedphrase wallet in my opinion
@@reality-winner5759 right, and the fact that "the bug was not detected during initial code reviews or testing", is a hint on Tangem's level of dedication to develop their products. Straight to the point: wtf did the beta test of their wallet and app?
i also had a very bad buying experience with them. the site said 2-3 days to canada and 15 days later still nothing and the tracker didnt update at all.. then they send me another tracker that shows they just shipped it ..15 days later...
Thank you for this updated information and clear explanation. This channel is without a doubt the best place for crypto wallet information and evaluation. I appreciate the time and effort! Easy to get caught up in FUD when nothing in this game is ever 100%. To be human is to error. Thanks again for releasing an update to calm the nerves. Keep up the good work!
Are you able to transfer your crypto out of tangem without a seed phrase or do you need the seed phrase in order to transfer? And what would you prefer to choose between seeded or seedless?
Bought one in december, have yet to open it n set up. Seeing the stuff on reddit was sketch so ive been holding off even more on setting up and debating if i should return. ill make my decision by end of your vid
Thank you Alex for your professional, thoughtful, clear, concise and researched responses. You’re going the “extra mile” for all us Crypto investors is to be commended. “Shame on you” to those who are giving Alex a “hard time”. He is giving us information - time consuming researched information - as a bonus. If you can do better, then start your own podcast instead of complaining.
Alex,My wife and I really appreciate your videos ,particularly how straight forward and forth right you are.I'm fairly new to cryto and your videos are a wealth of information and I recommend you & your channel at every opportunity. Many Blessings in the New Year.
Hey, only one clarification. In your video, you said that people affected by the issue received a notification to answer a question about the additional steps. Actually, Tangem confirmed they couldn’t know the generalities of those people, since they erased the data. Therefore, all the seed users received the notification and, unfortunately, the single User had to confirm if he / she was affected by the issue or not. Which is a major letdown from my point of view. Keep up the good work!
Thanks for the clarification. I don’t think it’s a huge deal that the user had to click a yes or no button. This was probably a better approach overall, but it could’ve been communicated better too.
Hey @cyberscrilla, the issue is not that. In my opinion, they should have identified the affected Users and direct the relevant communication only to them (as opppsed to send the notification to all Users with a seed). I hope I expressed myself correctly. You rock! XOXOX
@@cyberscrilla that is right. But how can we be sure they erased data and logs for real? They could have made a list of affected Users at the date, therefore, erase all data.
Thank you for the update. I bought Tangem based upon your video about 3 weeks ago. I still haven't set up my acct because ive been nervous. I haven't even opened the box. Does that mean i have nothing to worry about since i havent set up the wallet yet?
I received a notification asking if i used the support (i know i did when ? Dont remember) because i received some crypto that i did not buy .. the notification say click here when i click OOOPS this page dont exist anymore ... soooo can someone help ?
Now i can re-order my tangem wallet because i canceled my tangem d other because what i heard the bug.. and i watch almost of your reviews in tangem. Thank you for this review
Thank you for doing this video … I didn’t know about it but thought it had to do with not seeing token totals listed on my wallets 🧐 but again thank you
So, if i were to buy one now with seed, and even if i use customer support within 7 days, my seed would not be shared? Also, Thanks for clearing everything up and explaining, was having a hard time trying to find the facts.
So im waiting for my tangem cards soon, heard about this bug that happened recently when they released seed phrases, Is it all patched and fixed now? Or still have to go offline aka airplane mode, not connected while FIRST setting up and getting the seed phrase options, then after complete, go online? edit: oh now its private key, but yeah now is everything all fixed for future customers?
Thank you for all your help and support with these videos! I literally joined the CRYPTO community 2 weeks ago and it’s been an amazing journey of learning, but still so much more to learn. I really don’t have anyone teaching me or guiding me, so your videos have been a huge help. Could you perhaps do some videos for people like myself that are just starting out? Basic grounding in: Terminology. Technology requirements, DOs and DONTs for newcomers. Thanks for sharing your experience!
How exciting! The crypto space can be really fun, but also very stressful. I highly recommend watching my crypto masterclass video that will teach you some of the terminology and how some of the fundamentals work: th-cam.com/video/fbut5dLecrs/w-d-xo.html
You're all good, Scril. The important thing is that you are coming out straight and giving all of your subscribers the information. Myself, I took a couple of days off and did not even know about the issue...and I did buy the 3 Tangem Cards a few weeks ago (and did not even set up yet). Thanks for the information and carry on your good work.
Compare the 2017 chart to the last 12 months, it’s almost identical, this says to me that by next Wednesday we are going to the moon, possibly as high as $9. Craig 🇬🇧
Any word on when they will be adding the new staking options. I saw tangem plan from 3 months ago. Said for quarter 4. Im guessing that was just the qt 4 plans. Unless it was planned for qt 4 of 2025. Thanks for you work man.
I was the one who spotted the bug and initially reported it on Reddit, though I later had to delete the post due to lot of people trying to message me, trying to login to my social media accounts. I’m glad Tangem addressed the issue swiftly and maintained communication with me throughout. I understand the concerns and apprehensions, but personally, I’m still using my Tangem with a seed phrase as it was an edge case which I agree and these things can happen. By the way, I bought my Tangem card thanks to your reviews!
Whoa! We have a Legend in the house!! Cool to see you here! Thanks for sharing that and dropping a comment! AND for helping make Tangem a better wallet!
- Alex
@@cyberscrilla Thanks, mate! Honestly, I should be the one thanking you. Your reviews and videos on Tangem have been incredibly helpful in guiding my decision on which cold wallet to buy. This truly sets you apart from all the other TH-camrs I’ve watched. You’ve been a huge asset to the Tangem community. Keep up the great work, and more power to you! 🚀
@Ravzzy: I am getting more and more confused by the used terminology.... Tangem cleams a seedless setup... huh? I thought the private key was never supposed to leave the Secure Element Chip? I imagined the 1st card was providing the entropy, the app was generating a 12 word seed phrase, provide it to the first card and that card generates and stores the private key, never to reveal it. Then you move to create a backup, either you write down the 12 words or a second card it initialised with the 12 seed phrases, it generates and stores the identical private key, never to reveal it. Step 3 a third card might also generate the identical private key and store it (never to reveal it) as the second backup. How is the app able to see the private key in the first place? Does this not defeat the whole setup?
thank you for the bug . tangem will be better.
This article clearly outlines how the seedless operation works: tangem.com/en/blog/post/how-tangem-wallet-backs-up-private-keys/
And this one outlines the seed phrase operation: tangem.com/en/blog/post/seed-phrase-faq/
Timing is a funny thing. I had just bought a tangem wallet a few weeks ago. Haven’t taken the time to transfer my coins yet. Sometimes procrastination pays off!! Any way thank you for all your hard work. I really do believe you do this out of passion and i think people like you are the original reason for the internet.
I'm in the same boat too. I'm a procrastinator and sometimes it helps
Same, will you still use it now?
Facts! Thanks for watching!
Literally just bought a wallet and this video dropped. 😅
I'm in the same boat, but one of my cards couldn't be scanned, so I'm currently in discourse with tangem now regarding the fault, they want me to video the problem so I waiting until after the holidays
I appreciate you. Your honesty and your good intentions come through loud and clear 👍
Thank you
Tangem needs to hire you for social media. Your knowledge is unparalleled. Thanks for all your help.
Thanks for your kind words and watching the video!
I went with Tangem because of your videos!
Haha, that is awesome thanks for watching the video and dropping a comment!
Alex, ignore the idiots, keep up the good work, i used your link to buy Tangem 😊 you need to be rewarded for the work you put out most appreciated
Thank you!
I just ordered the Tangem from your link the other day.
Glad the timing worked so well and that its already been sorted!
Awesome thanks for watching the video and dropping a comment
Thank you for a clear and concise reporting on the Tangem bug. This is a channel worthy of its subscribers.
Thank you
Move your crypto to an exchange, reset your Tangem wallet to factory settings (blank slate status), install updated app, create new wallet, move your crypto back to the new, updated wallet. Got it.
Install updated app first. Doesn’t really matter I guess just update the app lol.
no need to move the crypto to an exchange, just move it to another wallet you own... and then back to a resetted Tangem
Hi Grant, well I was having a problem with the second wallet and I did exactly what you just said I created a trust wallet moved all my funds to that wallet ready to reset the Tangem wallet and yes I got scammed. I think they call it dusting, and I lost everything, $65,000 scammed straight out the wallet everything I ever invested so I guess I’m done with crypto at this point in time.
@@Guvner58 Oh man, I'm so sorry that happened to you! I hate these SCAMMERS!
@@ttkddry True, but an exchange is a safe place unless you have a verified 2nd wallet. Look at the comment below. I used to have a Trust wallet and the Pancake swap app created an open pathway that can easily be exploited and I lost $1,300 worth of crypto about 2 years ago. I won't use Trust wallet anymore since I don't trust it.
I used your discount code and ordered the Tangem Stealth wallet that should be arriving any day now. This video couldnt have been timed any better. Thank you.
Awesome! Thanks for your support and for dropping a comment
- Scrilla
How long has it been since you ordered....???
Still waiting on mine as well
Same
@@skinnyaction5505 how long has it been since you ordered yours?
@@lordrex3824Ordered like a week ago and I received it today
I didn't even know this bug happened, but I'm glad it's already been resolved!
It all happened quickly (over the weekend)
Cyber Scrilla I would just like to say I appreciate all that you do to inform the community about different cold wallets. You are in my opinion a very trusted source. I hope people realize that. KEEP UP THE GREAT WORK!
I really appreciate you saying that and for watching and supporting the channel much love
I'm really happy you made this video. I didn't really think I was at risk but still lingered in the back of my mind. You definitely took some of that weight off. Your the best man.
Glad it was helpful! Thanks for watching and dropping a comment
🚨 Hey! Just a heads-up: I will never reach out to you directly on social media, and neither will Tangem.
I do my best to keep the comments clear of spam and misinformation, but always stay vigilant and double-check anything suspicious!
God bless,
- Scrilla
Totally appreciate you being so open! Most definitely appreciate you putting out these videos!! You are clear and easy to understand. This old human is new to all of this crypto and even newer to wallets. SO thankful I came across your videos!! I had no idea you could loose your crypto 😢 Again THANK YOU!!!!
Thanks for leaving this kind comment and for watching the channel! Cheers!
- Alex
Mad respect for keeping us updated. Thank you!💪
100% thanks for watching
I want to thank you for taking the time to investigate and explain the situation. I used your referral link to buy the Tangem Wallet and activated my card in December. On the same day, I contacted support via the app. It was only through your channel that I learned about this security bug. This makes me question if a cold wallet offers any more security than a hot wallet.
They do. And you should definitely use a cold wallet. Whether it’s Tangem or another brand. Don’t risk your crypto because a bug scared you away. Be responsible.
@@cyberscrilla They also need to compensate us for this. Since transferring our crypto to another wallet means incurring unnecessary transaction fees.
Thanks for the update. Keep up the great work informing us!
Thanks for watching
I appreciate the transparency and security features that Tangem has put in place. I've just used your 10% discount code to order the ring and two-card set.
Thank you 🙏
I purchased a Tangem wallet because a seed phrase wasnt required and hence the vunerabilty only began when they offered it due to market pressures. The original offering is still the best.
Some people love the seedless option, others not so much.
Me personally, I like knowing my seed phrase
@@MrAphorism tangem goes bust, no more app no more support. How do you recover your funds?
Even if Tangem goes bust, the app doesn’t magically disappear. It’d still be on your device. And the basic send/receive function of the app doesn’t rely on Tangem servers, so you’d still be able to at least transfer your crypto to a new a wallet (assuming you don’t have a seed)
If you have a seed phrase, just import it into a new cold wallet and you’re good to go
Have existing seed phrase and will save transaction fees @@cyberscrilla
As a relative newby (64yr old) to the crypto scene, I thoroughly enjoy your channel and have learned a lot from it. Thank you for your honesty and easy to understand explanations of crypto. I too have ordered the Tangem cards with your discount link. Thank you.
I got my Tangem wallet on Tuesday and it was either that same day or Wednesday that I saw a comment on one of your other videos about seed phrases being leaked.
Luckily, not only did I NOT set a seed phrase, I also didn't contact support at any point, so I've been fortunate enough to avoid that bug. Either way, I'll still be using Tangem going forward and will NEVER use a seed phrase as there's too much risk involved with them. They're archaic and can actually be guessed and it'll only become more apparent once bad actors get hold of quantum computers when they eventually become cheap enough.
ummm a wallet still has a private key- you just dont see it, it stays in the security chip
what will you do if tangem the company ever goes bust? no more Tangem app, no seedphrase to recover your funds GL
@1greenMitsi hopefully if that ever happens, I'd have already either cashed out completely or I'd be holding my crypto on an exchange and staking it securely once all of these new regulations kick in.
@@1greenMitsiNo, the source code for the API is available on GIT hub. Anyone can write their own app if the phone app becomes unavailable. ChatGPT will do it for you.
Just ordered my wallet this morning. I'm glad this was caught and addressed.
Same here. Cheers!
I would like them to acknowledge when deleting the emails that contained the keys did this include each and every backup since the data collection started?
As a SYSADMIN I’ve been asked to do similar requests, it’s easy to delete the data from existing email systems but deleting it from months or years of backups can feel impossible depending on the service used
If they have the ability to recovery a backup (and they likely do) then deleting the emails in the live system means nothing
This was the best vid I’ve seen yet about this incident, thank you. As a Tangem user and someone who has recommended this wallet to others, as I feel it’s the best on the market, glad to know this has been addressed and who specifically was affected.
Agreed. Thanks for watching!
There are bugs found and fixed all the time. This is just one bug that people found about. I'm glad it's fixed.
Facts this happens way more than people realize. Not to say that it’s not concerning or acceptable, but it is a part of technology and cyber security.
Dude, you are the best... I don't understand people... I hope you keep helping
Thanks for saying that and for watching the video. Cheers
Some people need to be FIRED!!! Then watch how the remaining employees get in line ASAP!!! That will reduce these things from happening!
Thank you, Scrilla for the update.
Any time!
There will be at least one person who leaked his own private key or phrase and now will blame Tangem.
You know it
I could definitely see this. Just like all the horror story about uphold. I see people all the time losing money on there. I almost stopped using it because, but I found a lot of it is people doing dumb shit on there account. If they ask you to update information than you should do it. People get locked out for using VPNs and not updating info when they ask for it. Some cases might be legit but I believe most is people not doing transactions right.
Just got the set of 3 cards using your link, after watching many of yours and other reviews, I made the decision mainly to put away my xrp. I also don't like how coinbase limited me to buy a lot of xrp at .55 cents back in November otherwise I would be around $120k to $200k on unrealized returns time to save my xrp and wait for 2027.
Exactly why I keep at least my BTC spread out over several hardware wallets. All from different manufacturers, too. The whole, "all your eggs in one basket" thing.
Thanks for posting this, Scrilla. 👍
Very smart! Thanks for watching
Private key should not leave the EAL chip, in fact it was copied into the app that is a really big red flag..🤔
And How do you make sure is not intended buy tangem?
They dont have QA before?
Brother, you’ve made an excellent point, and it’s truly a massive red flag. If Tangem advertised that the private key never leaves the EAL chip, yet from day one, the implementation allowed it to be copied or accessed externally, that’s a blatant lie.
Even more concerning is the fact that the support team reportedly has access to the long private seed. This suggests Tangem might actually have visibility into users' private keys. If true, this is a severe breach of trust and security. Such practices would directly compromise the very essence of a secure, decentralized wallet. It’s hard to trust a system where the core principle-keeping private keys private-is violated.
It’s been known since the seed phrase came out how this operation works. You can read about it here.
tangem.com/en/blog/post/seed-phrase-faq/
I agree. The keys never should have left the chip. I was under the impression this was how it works. I understand mistakes happen, but this is a huge mistake. I can’t help but think if they missed this, what else have they missed, and what aren’t they communicating to us? Personally, my trust is shaken.
That 'bug' is really absurd... Logging the key, then sending it unencrypted by email is just... I'm out of words for it
I don't know if the private key(s) is/ are leaving the EAL chip per say, they are probably already entering the buggy logs while a new user gets or imports a seed phrase (the keys are generated following that). So the keys are getting stored on the cards and wrongly getting on some logs simultaneously?
I opted seedless but congratulate Tangem on jumping on this once it was discovered. I am also grateful to you for pointing it out. Thanks! 🙏
Why do you say discovered? How you know it is not intended ?
@@Praptoprapti2023 For all the reasons given in the video. It would be suicidal. Further, they didn't discover it, it was reported to them.
For sure, thanks for watching
This is what I was worried about when setting up with seedphrase. Feels like somebody is watching in your phone even if you use private wifi.
When the app functions like it should (without the bug) it’s secure
Thank you for your clear explanation of what occurred with the tangem wallet. I bought tangem wallets, but haven’t used them yet, so I wasn’t affected. I love your videos, they’re easy to understand especially for anyone new to crypto. Thank you!
Glad it was helpful! Thank you!
This is exactly why I have more than one type of cold wallet storage. It’s the Wild Wild West out there 💥🔫
Always a good idea!
Hey bro,
I really appreciate your honesty, and thank you for taking the time to explain everything-it can be so confusing, especially for newbies like me. I set up my Tangem wallet yesterday without any issues, all thanks to your videos. I truly appreciate the great info you provide, and don’t let the haters get to you. God bless you!
I appreciate that! Thank you for watching and leaving a kind comment. I really do appreciate it.
I wonder how long their customer service didn’t notice private keys in app logs?
Who knows. That’s why if you were affected, it’s best to follow the steps outlined in this video.
@@cyberscrillafor sure
I think that’s really strange too. Don’t the read the emails ?
Thank you very much for clarifying. I am very grateful for your education regarding to all the different cold wallets.
Thanks for watching. I’m glad this video was helpful.
Thank you for this, I ordered my ring wallet a few days ago and waiting for to arrive, then heard about the bug and became mortified. Thinking have I wasted my money but that has put me at ease.
It’s all fixed now.
why in the last 7 days? where is the seedphrase held for 7 days and why is it programmed to dump it after that
This exactly confirms my initial problems with deciding for Tangem. A secure wallet has to be air-gapped. I just don't trust my smartphone and afaik the concept of Tangem makes it necessary for the phone and app to work with the private key in some way. There are so many attack vectors.
Not true. It does not have to be air gapped as studies show air gap does not provide extra security.
The audacity of people 🤦♂️. Thank you for your work I truly appreciate it
It’s all good lol. Thank you for watching and dropping a comment!
Bro!!! I literally just set up my Tangem after finding your channel.
I didn't have a seed phrase yet, so went with the non seed set up.
😅 thanks for covering this makes me feel better about my choice hahaha
Thanks for watching!
if I put my tangem wallet in my wallet is that Inception? Like a dream within a dream? Asking for a friend
🤣
Thank you ! I appreciate your contribution to the community.
Thank you 🙏
Tangem should make a wallet for the desktop.. I just dont want allot of my stuff on a phone , maybe later if it gets very high in price I may carry a bit on it but I don't need it on a phone now .
It was your great reviews of Tangem that led me to purchase the wallet. I think it just boils down pure complacency! I will still use as they accepted the error, addressed it, fixed it, and did not try to hide the problem. Now, they need to address the internal problem that led to this and fast to keep from ever happening again.
Agreed. Thanks for watching the video!
I just bought tangem because of your videos 😂 i still trust them and this bug Finder program will be good
The bug bounty program is a good thing for sure
Complacency can get the best of anyone!! Like everyone else I'm not happy about this issue; however, I feel that Tangem handled the situation appropriately. I agree that the issue should have never happened and Tangem kinda dropped the ball with testing, but it sounds like they have learned a valuable lesson. As far as Cyber Scrilla channel goes...keep up the good work! It is really obvious what you do and that you don't represent any of these companies. You do reviews on the products you own. I appreciate the information...and I too will continue to use and recommend Tangem. But, I will continuing to evaluate as time passes...but that goes for all of my wallets!
Thank YOU! Good stuff
This is exactly what I mentioned in previous videos about the issue with these cards. It is not about just verifying transactions that you need a hardwallet. It is also about generating the key phrases that should not leave or generated on anything else other than the hardware wallet.
I am grateful for your help. I just have been waiting for 2 weeks for my Tangen
Would you put a million dollars in a tangem wallet ring ??
Yes and no. If all I had was a million, I wouldn’t put that on any one wallet, I’d diversify it across multiple wallets.
If I was a mega millionaire, yes.
Thanks, I ordered a ring and the btc cards using you savings code , surprised not arrived yet
Thanks! I believe the BTC cards are on backorder according to the website, says shipping begins Jan 24.
Not sure if that’s the case for your order though. But just be aware.
Thank you for your time in being this issue to an understanding 🙏🏽
Glad it was helpful! Thanks for watching
I know this is not related to what is being said here. But I use a separate prepaid phone for my crypto and I don’t do anything on that phone. No social media, no email no bill paying etc. Absolutely nothing. I haven’t even applied the prepaid minute card I purchased. I typically use WiFi with airplane mode on to check my progress. Hope this helps!!!
Yea, I think I'll be switching to a BTC only cold wallet and use another hardware "warm" wallet. Less coins = less code = less likely for vulnerabilities in an ever expanding code base.
First for once haha thanks for the vid
Let’s goo!! Thanks for watching a dropping a comment!
@@cyberscrilla you helped me greatly with my choice of cold wallet. Ended up going with a Keystone 3 Pro.
Have been following the Tangem situation on Reddit. Was hoping you’d post your thoughts soon.
Thanks!
Awesome choice! Thanks for watching the vid and leaving a comment
Why should we have network connexion during importing seed phrase?
I tried offline but i didn't work
THANK YOU BROTHER.
I HAVE TRANSFERED MY CRYPTOS AND DONE TANGEM RESET AND NOW WITH NO SEED PHRASE.
private keys stored in log files and automailed to tangem headquarters is no 'bug'. thats the one thing no wallet should ever do and undermines the primary reason to get a hardware wallet...
Completely agree
Thanks for the update, and for the explanation regarding your affiliation with Tangem.
Definitely, thanks for watching
I ordered a Safe 5 after this whole debacle but will reset my cards and use it seedless from now on and treat it like my metamask
I still think tangem is trustworthy and nothing beats the usability of it, its still a great wallet but not as a seedphrase wallet in my opinion
I went seedless when i set up my Tangem last year. Glad i did.
me too, are we ok then?
Everyone is good now. The bug fixed. You watched the video right?
@ i’m getting thru it ty!
Bottom line: Tangem is evaluating the option of implementing a seed recovery service, as @Ledger did.
That means bottom line never use their products
Yup. I'm done with this wallet. There is no forgiveness on Crypto...
@@GFCProductionsx facts, people are putting their lives energy on these seed phrases, there is no room for oppsies by these companies
@@reality-winner5759 right, and the fact that "the bug was not detected during initial code reviews or testing", is a hint on Tangem's level of dedication to develop their products. Straight to the point: wtf did the beta test of their wallet and app?
@@GFCProductionsx absolutely. The "bug" fully defeated the concept of "cold wallet"
Thank you I ordered Tangem, we will see how it goes
Hmm wonder what else they havent noticed... I just bought tangem and now im going to sell it..
Tangem still one of the only wallets that have not been hacked
To each their own 👍
Well when you have a coding team that sleepy you dont need others to hack you. You hack yourself by being sleepy.
i also had a very bad buying experience with them. the site said 2-3 days to canada and 15 days later still nothing and the tracker didnt update at all.. then they send me another tracker that shows they just shipped it ..15 days later...
Bought Tangem after watching ur videos using ur code I set up back in September after watching this video Im at peace thx for what you do my friend 🙌
Thank you!
Thank you for this updated information and clear explanation. This channel is without a doubt the best place for crypto wallet information and evaluation. I appreciate the time and effort! Easy to get caught up in FUD when nothing in this game is ever 100%. To be human is to error. Thanks again for releasing an update to calm the nerves. Keep up the good work!
Wow, thank you for saying that and for watching the videos
Thank you! I did not know anything about tangem.. i dobyhankbyoubforvhelping the public.
Thanks for watching!
Are you able to transfer your crypto out of tangem without a seed phrase or do you need the seed phrase in order to transfer? And what would you prefer to choose between seeded or seedless?
No. You don’t use a seed phrase for simple transactions. Only when recovering a wallet.
I use seed phrase
@@cyberscrillaokay cool! Thanks for the reply!
Happy to help
Some of the comments are brutal, glad you clearly stated your position 👌
That’s the internet for ya.
Bought one in december, have yet to open it n set up. Seeing the stuff on reddit was sketch so ive been holding off even more on setting up and debating if i should return. ill make my decision by end of your vid
I’m still using mine. But you do what you gotta do
Thank you for your dedication to your community.
Thanks for watching the video
Thank you Alex for your professional, thoughtful, clear, concise and researched responses.
You’re going the “extra mile” for all us Crypto investors is to be commended.
“Shame on you” to those who are giving Alex a “hard time”. He is giving us information - time consuming researched information - as a bonus.
If you can do better, then start your own podcast instead of complaining.
LOL thanks for watching and dropping a comment
Alex,My wife and I really appreciate your videos ,particularly how straight forward and forth right you are.I'm fairly new to cryto and your videos are a wealth of information and I recommend you & your channel at every opportunity. Many Blessings in the New Year.
I really appreciate you and your wife for watching my videos, I’m happy to hear this. Happy new year God bless you and your family
Crypto can be overwhelming, but you make it easy to understand.Thank you!
Thanks. Just bought 3 so appreciate this.
Happy to help thanks for watching
Happy new year 🎉.Thank you very much for the data insights.
Happy new year. Thank you for watching.
That is an extremely serious flaw.
Indeed. Fortunately it was fixed promptly,
Well balanced and very thorough!
Thank you!
Thank you for saying that and for watching!
- Scrilla
I bought it because of your great videos. Please explain. Your awesome and no one is blaming you.
Hey, only one clarification. In your video, you said that people affected by the issue received a notification to answer a question about the additional steps. Actually, Tangem confirmed they couldn’t know the generalities of those people, since they erased the data. Therefore, all the seed users received the notification and, unfortunately, the single User had to confirm if he / she was affected by the issue or not. Which is a major letdown from my point of view. Keep up the good work!
Thanks for the clarification.
I don’t think it’s a huge deal that the user had to click a yes or no button.
This was probably a better approach overall, but it could’ve been communicated better too.
Hey @cyberscrilla, the issue is not that. In my opinion, they should have identified the affected Users and direct the relevant communication only to them (as opppsed to send the notification to all Users with a seed). I hope I expressed myself correctly. You rock! XOXOX
@@blade0r Yes I understand that. But then they would have to kept the log files for longer. Would be more of a risk to users.
@@cyberscrilla that is right. But how can we be sure they erased data and logs for real? They could have made a list of affected Users at the date, therefore, erase all data.
@@blade0r well, that’s exactly why they sent out a message to create a new wallet if you were affected.
Thank you for the update. I bought Tangem based upon your video about 3 weeks ago. I still haven't set up my acct because ive been nervous. I haven't even opened the box. Does that mean i have nothing to worry about since i havent set up the wallet yet?
Correct. The bug has been fixed. And it never affected the cards.
@cyberscrilla Thank you! I appreciate your honesty and integrity in creating this video.
I received a notification asking if i used the support (i know i did when ? Dont remember) because i received some crypto that i did not buy .. the notification say click here when i click OOOPS this page dont exist anymore ... soooo can someone help ?
You should follow the steps I outlined in this video since it sounds like you’re affected
I ûnderstand but they should take the fees on their side i mean damn 😢
Your honest opinions are well appreciated 👍🏾
Thank you!
Thanks for putting this out here and honesty 👍🏻
Thanks for watching!
Now i can re-order my tangem wallet because i canceled my tangem d other because what i heard the bug.. and i watch almost of your reviews in tangem. Thank you for this review
Awesome thanks for watching the video
Thank you for doing this video … I didn’t know about it but thought it had to do with not seeing token totals listed on my wallets 🧐 but again thank you
That just sounds like a network issue. Has nothing to do with this bug which is already fixed
Yes it seemed it was and they did fix it 👵🏻… when I saw your video thought it could have been related but glad all is well 😇 thank you for your reply
Thx for information. Great work. Happy new year.
Happy New Year. Thank you!
Happy New Year bro! Thanks for the 411!
Happy new year thanks for watching
So, if i were to buy one now with seed, and even if i use customer support within 7 days, my seed would not be shared?
Also,
Thanks for clearing everything up and explaining, was having a hard time trying to find the facts.
The bug is fixed, this is not an issue any more. Thanks for watching!
So im waiting for my tangem cards soon, heard about this bug that happened recently when they released seed phrases, Is it all patched and fixed now? Or still have to go offline aka airplane mode, not connected while FIRST setting up and getting the seed phrase options, then after complete, go online?
edit: oh now its private key, but yeah now is everything all fixed for future customers?
Yes, this bug has been fixed already.
Thank you for this video Alex! God bless and happy new years!
Thank you God bless you too
Why would you use a seedphrase? The tangem recommanded not using one…
Thank you for all your help and support with these videos!
I literally joined the CRYPTO community 2 weeks ago and it’s been an amazing journey of learning, but still so much more to learn.
I really don’t have anyone teaching me or guiding me, so your videos have been a huge help.
Could you perhaps do some videos for people like myself that are just starting out?
Basic grounding in:
Terminology. Technology requirements, DOs and DONTs for newcomers.
Thanks for sharing your experience!
How exciting! The crypto space can be really fun, but also very stressful.
I highly recommend watching my crypto masterclass video that will teach you some of the terminology and how some of the fundamentals work: th-cam.com/video/fbut5dLecrs/w-d-xo.html
@ thank you!! I appreciate the help and advice.
I will keep watching your channel. I have already subscribed.
Thanks again - from Sydney Australia
Thanks for this in depth video, did not know about the 7 day period.
No one did. It was a bug. It’s fixed now though. 👍
You're all good, Scril. The important thing is that you are coming out straight and giving all of your subscribers the information. Myself, I took a couple of days off and did not even know about the issue...and I did buy the 3 Tangem Cards a few weeks ago (and did not even set up yet). Thanks for the information and carry on your good work.
I appreciate you saying that and for watching the video. Onward and upward.
Compare the 2017 chart to the last 12 months, it’s almost identical, this says to me that by next Wednesday we are going to the moon, possibly as high as $9. Craig 🇬🇧
What is the ring in Tangem do? Do I need it?
Thanks so much for the info / update, I have a BRAND new Tangem that I haven't set up yet, but I think I will now / soon
Awesome thank you for watching and leaving a comment
Any word on when they will be adding the new staking options. I saw tangem plan from 3 months ago. Said for quarter 4. Im guessing that was just the qt 4 plans. Unless it was planned for qt 4 of 2025. Thanks for you work man.