Security Risk in Tangem Crypto Wallet App

Tangem, a provider of crypto wallets, recently discovered a major security flaw in its mobile app that unintentionally gathered users' private keys through email exchanges. Despite prior warnings from users about potential security threats, the issue persisted until December 29 when it was brought to light on Reddit. The vulnerability allowed private keys to be stored in email histories, potentially exposing them to Tangem employees. Following community outcry, Tangem acknowledged the bug on December 30, attributing it to a log processing error. While the company claimed to have fully resolved the issue and deleted all affected logs, concerns were raised about their communication approach. Some users criticized the lack of public announcements on social media. As of December 31, Tangem had not made any official statements on their social channels, urging users to update their apps immediately to address the vulnerability.