This year we brought our Applied Fault-Injection training to Black Hat USA in Las Vegas. Thomas (stacksmashing) led the training, and I helped teach and support the participants. We taught two groups over four days, with each group spending two full days learning how to glitch real chips.
Hands-On Fault Injection
The training focused on practical voltage fault injection, using our Faultier and a range of target boards. Participants set up the hardware and wrote Python code to investigate how glitches can bypass chip protections. The goal was to give participants enough practice to approach new targets and develop their own attacks.
Participants received their Faultier, target boards and course materials to continue experimenting after the training.
A Wallet with Real Bitcoin
One of the targets was our Damn Glitchable Wallet, based on the older open-source Trezor hardware.
For the exercise, we loaded real bitcoin onto the wallet. The first participant to recover its seed using fault injection could claim the coins.
After Black Hat, we also ran our self-paced workshop at DEF CON. It offers a lighter introduction to fault injection, while the professional training is an intensive two-day deep dive with individual support throughout the exercises.
