Search papers, labs, and topics across Lattice.
This paper uncovers Bit2Watt, a novel vulnerability that allows adversaries to manipulate GPU workloads to create high-frequency power modulations, destabilizing local power infrastructure and disrupting computing services. By exploiting legitimate workload execution paths, Bit2Watt operates undetected within the cyber layer, posing significant risks especially in environments with high distributed energy resources (DERs). The authors validate their findings through impedance analysis, simulations, and real-world experiments, demonstrating that manipulating 1,000 GPUs can drastically degrade power quality, potentially leading to cascading failures in larger systems.
Manipulating GPU workloads can destabilize power infrastructure, raising current total harmonic distortion to 46.8% and risking cascading failures in data centers.
Modern data centers increasingly rely on large-scale GPU clusters and on-site renewable energy resources, resulting in a tightly coupled cyber-physical system between computing workloads and power-electronic-dominated grids. In this paper, we reveal Bit2Watt, a previously unexplored vulnerability in which an adversary manipulates GPU workloads to induce controlled, high-frequency power modulations that destabilize local power infrastructure and propagate back to disrupt computing services. Unlike traditional attacks that compromise grid-side devices or communication channels, Bit2Watt operates entirely within the cyber layer as a legal tenant, which could amplify fluctuations, harmonic distortion, and damping degradation, particularly in high-DER-penetration scenarios. This risk is difficult to detect under routine cloud- and facility-side monitoring because it exploits legitimate workload execution paths and concentrates much of its distinctive behavior in high-frequency components that are weakly captured by common telemetry. We validate Bit2Watt through impedance-based analysis, power system simulations, and real-world experiments on GPUs and grid-connected PV inverters. Under the synchronized worst-case aggregation model studied in the paper, manipulating 1,000 GPUs in a 1-MW local power system with 90% DERs raises current THD to 46.8% and results in a damping ratio of -0.27. We further show that the resulting power-quality degradation can stress data-center power-delivery equipment, trigger protection mechanisms, and, in extreme simulated cases, induce cascading failures in transmission-scale systems. In addition, we analyze a plausible Watt2Bit feedback path, including denial-of-service risks and covert information exfiltration via EMI side channels. This work highlights the urgent need for cross-layer defenses that jointly consider workload scheduling and power electronics.
