Joe Grand

Early Life and Background

Joe Grand was born on September 3, 1975, in Boston, Massachusetts. According to his own accounts and profiles compiled about his career, he became interested in electronics around the age of seven and spent his teenage years exploring and modifying electronic devices. He went on to earn a Bachelor of Science degree in computer engineering from Boston University, and was later awarded an honorary Doctorate of Science in Technology from the University of Advancing Technology in Arizona.

L0pht Heavy Industries

Grand became a member of L0pht Heavy Industries, a Boston-based hacker collective active during the 1990s that operated out of a shared loft space and conducted some of the earliest widely publicized security research into commercial software and hardware. Within the group he used the handle "Kingpin" and was its youngest member. L0pht's roster during this period included figures such as Mudge (Peiter Zatko), Weld Pond (Chris Wysopal), Dildog (Christien Rioux), Space Rogue (Cris Thomas), Brian Oblivion, Silicosis, and John Tan. On May 19, 1998, seven L0pht members, including Grand, testified before the U.S. Senate Committee on Governmental Affairs about weaknesses in government and commercial computer security, stating that a small group of hackers could disrupt major portions of internet infrastructure in a short period of time. The testimony is frequently cited as an early moment in which hackers were treated as credible technical authorities by the U.S. government, and the group's warnings were later described by press coverage as having gone largely unheeded by policymakers.

Hardware Hacking Career

Following his time at L0pht, Grand focused his work specifically on hardware security, a field he helped popularize as distinct from purely software-based hacking. He founded Grand Idea Studio, a research and development firm based on the West Coast that licenses inventions and provides hardware security consulting and product design services. His research has included demonstrating vulnerabilities in embedded systems and consumer devices, including a widely reported 2009 demonstration of flaws in San Francisco's electronic parking meters. He also designed the official hardware badges distributed at the DEFCON hacker conference from 2006 through 2010, and has served as a judge for hardware badge-hacking contests at the conference. Grand co-authored and authored multiple technical books, including titles on hardware, wireless, and game console hacking, aimed at documenting reverse-engineering techniques for a technical audience.

Television and Public Recognition

Grand reached a mainstream audience through his role as a co-host of Prototype This!, a Discovery Channel television series that aired in 2007 and 2008, in which a team of engineers and hackers designed and built ambitious prototype devices for each episode. The show helped introduce his hacker background and hardware engineering skills to viewers outside the security industry.

Cryptocurrency Wallet Recovery Work

In the 2020s, Grand became known for applying hardware hacking techniques to recover access to cryptocurrency wallets whose owners had lost their PIN codes or passwords. In a case that received substantial media coverage, he used a fault injection attack, a technique that manipulates the voltage supplied to a chip to induce it into an unintended state, to extract the PIN and recovery phrase from a Trezor One hardware wallet on behalf of a client who had lost access to funds that had grown to roughly two million dollars in value. He later worked on a separate case recovering approximately three million dollars from a decade-old software wallet by exploiting a flaw related to the RoboForm password manager. Trezor's manufacturer stated the underlying vulnerability exploited in the fault injection attack had been fixed in newer devices.

Legacy

Grand's career spans several distinct eras of hacker history: the loosely organized research collectives of the 1990s that first drew serious government attention to computer security, the emergence of hardware hacking as a specialized professional discipline, and the mainstreaming of hacker culture through television and media. He continues to speak at security conferences such as Black Hat, produce educational content, and consult on hardware security matters through Grand Idea Studio.

Timeline

• 1975-09-03Born in Boston, Massachusetts.
• 1990sJoins L0pht Heavy Industries under the handle Kingpin as its youngest member.
• 1998-05-19Testifies before the U.S. Senate Committee on Governmental Affairs alongside fellow L0pht members about vulnerabilities in government and commercial computer systems.
• 2007Begins co-hosting Discovery Channel's Prototype This!, which ran through 2008.
• 2009Publicly demonstrates security vulnerabilities in San Francisco's electronic parking meters.
• 2006Begins designing official electronic badges for DEFCON, a role he continued through 2010.
• 2022Uses a fault injection attack to recover roughly $2 million in cryptocurrency from a locked Trezor One hardware wallet.
• 2024Helps recover approximately $3 million from a decade-old software cryptocurrency wallet by exploiting a flaw related to the RoboForm password manager.