Is it possible to duplicate JaCarta/eToken keys?

Question

Burglary protection

Good day,
We have a hacked car, on which the client used the bank and used the JaCarta key.
Question: is it possible that the hackers made a duplicate of the key and physically it is no longer needed to make payments? (The bank, of course, said that this was impossible, but they are interested in the opinion of experienced people, and not "we are fine")

Answer 1

In principle, no (encryption, authorization, work through api without access to the memory itself), but as you know, "nothing is impossible", holes are everywhere and are divided only into two categories "available in public" and "not in public".

Answer 2

These keys are smart cards, their private key is physically protected. Any attempt to make a copy must destroy the chip.

Answer 3

And here a man claims that this can be done! Link to Habr