Nvidia disables parts of the GA100 chip on the CMP 170HX with eFuses, one-time fuse settings read when the GPU powers up. The voltage mod attacks that moment. Instead of changing the fuses, it makes the chip misread them.
According to Kate’s write-up, a small STM32G4 microcontroller board is wired to the card’s core voltage rail and its PWMVID control line, after removing a tiny 0-ohm resistor. The board then drives the card’s own MP2888B voltage regulator to produce precisely timed voltage dips while the fuse controller starts up. A comparator triggers at 225 mV, and the system sleeps and wakes the PC over and over until a glitch lands.
Finding a working glitch takes “somewhere between 1 hour and 48 hours” per card, and the right timing is specific to each chip. Kate says she published some of her tooling and disclosed the findings to Nvidia’s product security team before publishing.




