🔦 A Laser Extracts a Coldcard Mk2's PIN

On 18 May 2020, Ledger Donjon disclosed a laser fault-injection attack on the ATECC508A chip in the Coldcard Mk2: after decapping the chip and grinding it down, a precisely timed laser pulse could pull the PIN hash and grant "complete access to the Bitcoin managed through the device." The attack cost over $200,000 in equipment; Coinkite had already moved the Mk3 to the unaffected ATECC608A.