Bit2Watt Attack Uses GPU Workloads to Destabilize Data Center Power Grids

Researchers disclosed Bit2Watt, a cyber-physical attack concept in which a malicious cloud tenant uses legitimate-looking AI training jobs to rapidly modulate GPU power demand and destabilize the electrical systems feeding AI datacenters. The technique does not require malware or direct access to utility or operational technology networks; instead, it abuses authorized user-level control of GPU workloads to create oscillations in electricity demand that can propagate through data-center power infrastructure. In modeled tests on a 1 MW local grid with distributed or renewable-heavy energy resources, synchronized activity from 1,000 GPUs produced 46.8% total harmonic distortion and introduced an unstable mode with a -0.27 damping ratio, conditions the researchers said could trigger voltage excursions, equipment stress, load shedding, cascading failures, or blackouts.

The research also described Watt2Bit, a related side-channel and disruption concept in which power modulation or electrical stress can be used for covert signaling, data leakage, or denial-of-service effects against GPU operations. A proof of concept reportedly recovered a 50-bit test sequence using frequency-shift keying, underscoring that power behavior itself can become an attack surface. The authors recommended cross-layer mitigations including cloud workload monitoring tied to electrical telemetry, limits on tightly synchronized GPU jobs, distribution of workloads across separate power domains, stronger power-electronics protections, local energy buffering, and closer coordination between cloud scheduling teams and power-system engineers.