Laser Your Way Into Debug Mode On The RP2350

Ledger Donjon's security team used laser fault injection to bypass debug protections on the Raspberry Pi RP2350 microcontroller, which normally has secure boot, TrustZone separation, and glitch detection to block traditional voltage-glitching attacks. By decapsulating the chip, imaging the die with photon-emission microscopy to locate the debug-enable register, and precisely lasering it through the backside silicon, they flipped bits to re-enable debug access. After a reset, they successfully read the 128-bit secret from Raspberry Pi's official RP2350 hacking challenge, demonstrating that even a chip with strong hardware protections can be defeated with sufficient physical access and equipment.

Source: https://hackaday.com/2026/09/19/laser-your-way-into-debug-mode-on-the-rp2350. 8 Sync News only summarizes and links out; content copyright belongs to the authors and original sources.