You’ve probably noticed that every time a new phone or hardware wallet drops, the company brags about its “military-grade” secure enclave. They want you to feel safe. They want you to think your assets and data are locked inside an impenetrable digital vault.
But here’s the uncomfortable truth: Security isn’t a state of being; it’s an economic equation.
Recently, the security researchers at Ledger Donjon decided to test the limits of the new RP2350 microcontroller. They didn’t find a software bug. They didn’t guess a password. They literally pried the silicon open, bombarded it with photon emissions to map its internal logic, and then shot lasers at it to force it to leak its secure debug keys.
It sounds like science fiction. It feels like a scene from a cyberpunk heist movie. But it’s real, and it completely shatters the illusion that any device is truly locked down.
The critics in the comments are already dismissing it. “It requires physical access,” they say. “It requires destructive preparation. It takes $250,000 of laboratory equipment.” They argue this isn’t a practical threat to normal people.
They are fundamentally wrong.
They are looking at the price tag of the attack today, not the cost-curve of the attack tomorrow. Security research follows a relentless, downward trajectory. Techniques that once required state-sponsored budgets routinely become cheap and accessible. As security researchers have pointed out, attacks like Colin O’Flynn’s BAM BAM started as expensive, exotic setups. Today, you can replicate variants of them in a home lab for under $10,000.
Today’s exotic $250,000 laboratory attack is tomorrow’s $500 home-lab project.
When you realize that hardware security ultimately reduces to physics and adversary resources, the entire game changes. You can’t patch physics. You can’t issue a software update that makes a microchip immune to a laser. The only way to fix this vulnerability is to redesign the silicon itself—a process that takes years and millions of dollars.
For anyone building or relying on secure hardware—from crypto wallets to embedded infrastructure—this is a brutal wake-up call. Physical attack resistance must be part of your threat model. If you assume your device is permanently secure just because it has a secure element, you are trusting a lock that is slowly melting.
You don’t secure a device by making it impenetrable; you secure it by making it too expensive to crack—until it isn’t.
The assumption that any device is truly locked down is a lie we tell ourselves for convenience. The hardware you hold in your hand today is secure only because no one has spent enough money to crack it open with a laser. Give it a few years. The lasers are getting cheaper, and your “secure” hardware is already on borrowed time.
FAQ
Q: If it costs $250,000 to execute this attack, isn't my hardware still safe from regular hackers?
A: No. Security research follows a cost-curve. What requires a quarter-million-dollar lab today will be replicable in a garage for a few thousand dollars in a few years. The price of breaking security always drops; the security of the chip does not improve.
Q: Does this mean I need to throw away my hardware wallet right now?
A: Not immediately, but you need to accept that 'secure' is a temporary state. Physical attack resistance must be part of your threat model. If you're holding millions in assets, a $10k home-lab attack becomes a viable risk sooner rather than later.
Q: If hardware can't be patched, is all 'secure' hardware just a scam?
A: It's not a scam, but it's an illusion of permanence. Hardware security isn't a wall; it's a toll booth. It doesn't stop attackers; it just taxes them until the toll becomes cheap enough to pay.