Microsoft Xbox One Hacked: Decade-Old Security Finally Broken
A decade after its release, the original Xbox One has been successfully hacked, revealing deep hardware vulnerabilities. Security researcher Markus “Doom” Gaasedelen demonstrated the exploit, dubbed ‘Bliss’, at the RE//verse 2026 conference, achieving a full root-level compromise of the console. This breakthrough allows for the loading of unsigned code at every level of the system, including the hypervisor and OS, and provides access to the security processor.
The Impassable Fortress Falls
For years, the Xbox One’s security architecture resisted common hardware attacks. Traditional reset glitching techniques proved ineffective due to the console’s secure boot chain and advanced countermeasures within its System-on-Chip (SoC). Still, Gaasedelen bypassed these defenses through a sophisticated voltage glitching exploit.
Voltage Glitching: A Novel Approach
Instead of targeting system reset pins, Gaasedelen focused on inducing a momentary collapse of the CPU’s voltage rail. This technique directly manipulates the power supplied to the processor, causing transient faults during critical instruction execution. Developing new hardware introspection tools was crucial, as the researcher couldn’t directly observe the Xbox One’s internal operations. TechSpot details this innovative approach.
How ‘Bliss’ Works: A Double Glitch
The ‘Bliss’ exploit involves two precise voltage glitches delivered in succession. The first glitch bypasses the ARM Cortex memory protection setup, while the second targets the Memcpy operation during the header read, allowing the attacker to jump to attacker-controlled data. Grabify provides a detailed overview of the exploit’s mechanics.
Unpatchable and Comprehensive Compromise
Gaasedelen asserts that, as a hardware attack against the boot ROM in silicon, the ‘Bliss’ exploit is unpatchable. This represents a complete compromise of the console, enabling the loading of unsigned code at every level. Access to the security processor allows for the decryption of games, firmware, and other protected content. CTOL Digital highlights the significance of this full compromise.
Implications and Future Security
The successful hack of the Xbox One underscores the enduring challenge of securing complex SoCs against determined adversaries, even years after their release. This breakthrough demonstrates the potential of voltage glitching as a powerful exploitation technique and may prompt a re-evaluation of hardware security measures in future console designs. Guru3D emphasizes the implications for hardware security.