Skip to main content

Archived Article — The Daily Perspective is no longer active. This article was published on 15 March 2026 and is preserved as part of the archive. Read the farewell | Browse archive

Technology

The Xbox One's 13-year security run ends in a shower of sparks

Security researcher cracks Microsoft's supposedly unbreakable console using a precision voltage hack

The Xbox One's 13-year security run ends in a shower of sparks
Image: Toms Hardware
Key Points 3 min read
  • Security researcher Markus Gaasedelen cracked the original Xbox One using voltage glitching at the boot ROM level
  • The exploit is unpatchable because it targets the console's silicon, not software—Microsoft cannot issue a fix
  • Newer Xbox Series X and S models remain secure; the vulnerability is specific to the original 2013 hardware
  • Success rate is extremely low (1 in a million), making the hack impractical for mass piracy or theft
  • Digital archivists and repair enthusiasts could benefit from the ability to decrypt games and rebuild damaged consoles

Markus 'Doom' Gaasedelen has showcased the 'Bliss' double glitch, breaking what many considered an impenetrable fortress. Just as the Xbox 360 famously fell to the Reset Glitch Hack, the Xbox One has now fallen to Voltage Glitch Hacking. The original Xbox One, which has remained a fortress since its launch in 2013, has finally been cracked at a security conference in Florida.

A groundbreaking hack for Microsoft's 'unhackable' Xbox One was revealed at the recent RE//verse 2026 conference. For over a decade, Microsoft wore its security record like a badge of honour. Seven years after its launch, Microsoft engineers would still assert that the Xbox One was the most secure product Microsoft has ever produced. That claim, while perhaps technically true at the time, would not age well.

The attack itself is elegant in its simplicity, at least in theory. Instead of tinkering with the system rest pin(s) the hacker targeted the momentary collapse of the CPU voltage rail. The Bliss exploit was formulated, where two precise voltage glitches were made to land in succession. This double-strike approach bypassed multiple security layers that Microsoft had layered into the boot process.

What makes this breakthrough genuinely interesting, though, is not that it happened. Eventually, everything gets cracked. The significance is that the researcher has found a hardware-level exploit in the boot ROM, which prevents Microsoft from delivering a software patch to block any hacks. Microsoft cannot fix this with an update. The vulnerability lives in the silicon itself, baked into the original console's custom AMD processor. That is permanent.

Before you start worrying about your Xbox One collection, though, consider the practical barriers. The attack requires minimal wiring but boasts a success rate of just 1 in 1,000,000, often taking days of attempts and risking console damage, making it impractical for widespread use. This is not a plug-and-play hack or a modchip you can buy online. It requires 3-4 wires (efuse channel, GPIO, DAT anchor), cap removal, and used AI for boot ROM emulation to simulate attacks.

The real value of this breakthrough lies elsewhere. Repairs are now possible, including unbricking NANDs, fixing firmware, and decouple/repair disc drives, and DIY solutions for eMMC failures which can extend console life. For enthusiasts trying to rescue ageing hardware from the e-waste bin, this is genuinely useful. Digital archivists should enjoy new levels of access to Xbox One firmware, OS, games, and there could be subsequent emulation breakthroughs thanks to this effort.

Worth noting: Microsoft significantly upped its security features with later One S, X, and Series consoles, and they remain fully unbreakable to date. The newer hardware learned from the original's architectural vulnerabilities and closed the door Microsoft thought was already locked.

This hack represents something curious in the security world. On one hand, it is a genuine technical achievement after years of effort. On the other, it poses no practical threat to console security, no risk of widespread piracy, and no consumer vulnerability. Gaasedelen's three-year effort, involving dozens of destroyed consoles, marks the end of the Xbox One's decade-long unhackable streak, hailed as a win for Microsoft's security team despite the breakthrough. The irony is real: breaking the unbreakable was so difficult that the victory almost vindicates the original engineering that kept it secure for as long as it lasted.

Sources (4)
Jake Nguyen
Jake Nguyen

Jake Nguyen is an AI editorial persona created by The Daily Perspective. Covering gaming, esports, digital culture, and the apps and platforms shaping how Australians live with a modern, culturally literate voice. As an AI persona, articles are generated using artificial intelligence with editorial quality controls.