The Vulnerability: 'usbliter8'

The exploit at the heart of the dispute is a BootROM (SecureROM) vulnerability in Apple's A12 and A13 chips, affecting iPhone XS, XR, 11 series, and the second-generation iPhone SE . Paradigm Shift publicly disclosed this vulnerability on June 18–19, 2026, under the name 'usbliter8' . Because the BootROM is burned into silicon at manufacture, the exploit is unpatchable — no software update from Apple can fix it . Exploitation requires physical USB access and a device like a Raspberry Pi, but it enables a full jailbreak and deep system compromise .

How the Alleged Theft Unfolded

According to Magnet's complaint:

• Del Gaudio worked on the vulnerability while under contract with Magnet Forensics, where he signed confidentiality agreements covering the company's trade secrets and zero-day research .
• After his contract ended, Paradigm Shift independently published a full technical write-up and working proof-of-concept exploit for the same vulnerability — which Magnet claims it had already discovered and kept as a proprietary capability .
• Magnet alleges that Del Gaudio's work at Magnet directly informed Paradigm Shift's publication, effectively destroying the commercial value of Magnet's undisclosed exploit .

Legal Basis and Requested Remedies

The lawsuit is brought under the Defend Trade Secrets Act (DTSA), 18 U.S.C. § 1836 et seq., the federal statute that allows trade secret owners to sue in federal court for misappropriation . Magnet's complaint also includes state-law claims under the Florida Uniform Trade Secrets Act, breach of contract, and related counts.

Magnet is seeking:

• A temporary restraining order (TRO) to immediately prevent further disclosure or use of the trade secrets .
• A preliminary injunction to maintain the status quo while the case proceeds .
• A jury trial on all claims .
• Damages for the destruction of the trade secret's value, including the costs of the research investment that was effectively nullified by the public disclosure .

Broader Context: Economics of the Offensive Security Industry

This lawsuit highlights a fundamental economic vulnerability in the offensive security sector. A single zero-day disclosure can destroy millions of dollars in research investment. Companies like Magnet spend heavily to discover and weaponize vulnerabilities that government agencies and law enforcement then use for lawful access to devices. Once a vulnerability is published publicly, its exclusivity — and therefore its commercial value — vanishes completely . This creates intense pressure to keep zero-days secret, and equally intense litigation risk when a former contractor or researcher moves to a competitor or publishes independently.

Magnet Forensics' Corporate History

• Acquisition by Thoma Bravo: In January 2023, Thoma Bravo agreed to acquire Magnet Forensics for approximately C$1.8 billion (about $1.34 billion USD), taking the company private . The deal closed later in 2023.
• Merger with Grayshift: Thoma Bravo merged Magnet Forensics with Grayshift LLC, another digital forensics company it had previously acquired . Grayshift is the maker of GrayKey, a widely used iPhone unlocking tool.
• GrayKey and Government Contracts: GrayKey is used by U.S. law enforcement and federal agencies, including ICE (U.S. Immigration and Customs Enforcement). ICE held a contract with Grayshift valued at approximately $3 million for GrayKey devices and services.

Defendants' Status

As of the July 17–18, 2026 reporting date, neither Mario Del Gaudio nor Paradigm Shift Technology S.L. had publicly responded to the allegations . Paradigm Shift had published its 'usbliter8' technical disclosure weeks earlier, in June 2026 , and the company's blog post does not reference any dispute with Magnet.

The Vulnerability: 'usbliter8'

The exploit at the heart of the dispute is a BootROM (SecureROM) vulnerability in Apple's A12 and A13 chips, affecting iPhone XS, XR, 11 series, and the second-generation iPhone SE . Paradigm Shift publicly disclosed this vulnerability on June 18–19, 2026, under the name 'usbliter8' . Because the BootROM is burned into silicon at manufacture, the exploit is unpatchable — no software update from Apple can fix it . Exploitation requires physical USB access and a device like a Raspberry Pi, but it enables a full jailbreak and deep system compromise .

How the Alleged Theft Unfolded

According to Magnet's complaint:

• Del Gaudio worked on the vulnerability while under contract with Magnet Forensics, where he signed confidentiality agreements covering the company's trade secrets and zero-day research .
• After his contract ended, Paradigm Shift independently published a full technical write-up and working proof-of-concept exploit for the same vulnerability — which Magnet claims it had already discovered and kept as a proprietary capability .
• Magnet alleges that Del Gaudio's work at Magnet directly informed Paradigm Shift's publication, effectively destroying the commercial value of Magnet's undisclosed exploit .

Legal Basis and Requested Remedies

The lawsuit is brought under the Defend Trade Secrets Act (DTSA), 18 U.S.C. § 1836 et seq., the federal statute that allows trade secret owners to sue in federal court for misappropriation . Magnet's complaint also includes state-law claims under the Florida Uniform Trade Secrets Act, breach of contract, and related counts.

Magnet is seeking:

• A temporary restraining order (TRO) to immediately prevent further disclosure or use of the trade secrets .
• A preliminary injunction to maintain the status quo while the case proceeds .
• A jury trial on all claims .
• Damages for the destruction of the trade secret's value, including the costs of the research investment that was effectively nullified by the public disclosure .

Broader Context: Economics of the Offensive Security Industry

This lawsuit highlights a fundamental economic vulnerability in the offensive security sector. A single zero-day disclosure can destroy millions of dollars in research investment. Companies like Magnet spend heavily to discover and weaponize vulnerabilities that government agencies and law enforcement then use for lawful access to devices. Once a vulnerability is published publicly, its exclusivity — and therefore its commercial value — vanishes completely . This creates intense pressure to keep zero-days secret, and equally intense litigation risk when a former contractor or researcher moves to a competitor or publishes independently.

Magnet Forensics' Corporate History

• Acquisition by Thoma Bravo: In January 2023, Thoma Bravo agreed to acquire Magnet Forensics for approximately C$1.8 billion (about $1.34 billion USD), taking the company private . The deal closed later in 2023.
• Merger with Grayshift: Thoma Bravo merged Magnet Forensics with Grayshift LLC, another digital forensics company it had previously acquired . Grayshift is the maker of GrayKey, a widely used iPhone unlocking tool.
• GrayKey and Government Contracts: GrayKey is used by U.S. law enforcement and federal agencies, including ICE (U.S. Immigration and Customs Enforcement). ICE held a contract with Grayshift valued at approximately $3 million for GrayKey devices and services.

Defendants' Status

As of the July 17–18, 2026 reporting date, neither Mario Del Gaudio nor Paradigm Shift Technology S.L. had publicly responded to the allegations . Paradigm Shift had published its 'usbliter8' technical disclosure weeks earlier, in June 2026 , and the company's blog post does not reference any dispute with Magnet.