CITADEL Framework Automates Hardware Trojan Creation

A new framework named CITADEL automates the creation of hardware trojans, according to a research announcement from October 5, 2026. CITADEL leverages large language models and data flow graphs to design these trojans, focusing on vulnerabilities identified through Common Weakness Enumeration (CWE) standards. The framework assists in identifying insertion points, modifying register-transfer level (RTL) designs, and generating minimal, synthesizable trojans. Evaluation across RTL designs demonstrates 100% syntactic correctness for all generated hardware trojans.

These trojans remained undetectable during large-scale random simulation and were functionally triggerable as intended. CITADEL’s scalable approach represents a significant advance in generating realistic hardware trojan benchmarks, raising concerns about the security of integrated circuits and critical infrastructure. The research highlights a potential for automated exploitation of hardware vulnerabilities, demanding further investigation into detection and mitigation strategies. The ability to create undetectable trojans underscores the urgency for enhanced security protocols in hardware design and verification.