PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects
PhantomTac Attack Tricks Robots Into Dropping or Crushing Objects 🚀
Researchers have demonstrated PhantomTac, an innovative attack that uses hidden magnetic tags to deceive robotic touch sensors, leading to robots dropping or damaging objects. A small magnetic tag attached to an object can fool a robot’s magnetic touch sensors, causing it to drop an item, squeeze it too hard, or misjudge physical contact.
The details of this attack, known as PhantomTac, are outlined in a research paper by Binbin Zhang, Yifeng Zhang, Xiaomeng Chen, and Dongyao Chen. The paper was posted on October 19 and accepted for the ACM Conference on Computer and Communications Security (CCS) 2026, scheduled for November 15-19 in The Hague, Netherlands.
How Does PhantomTac Work? 🤖
Magnetic tactile sensors detect pressure by tracking changes in a magnetic field as their sensing layer bends or compresses. PhantomTac exploits a limitation in this approach: a small magnet close to the sensor creates a localized magnetic field that may not be canceled out. The resulting signal can be mistaken for a change in contact force, misleading the robot’s control system.
The researchers developed passive, battery-free magnetic tags around 0.5 millimeters thick, with an area as small as 1.44 square centimeters. These tags can be concealed beneath barcode or QR-code stickers. An attacker needs brief access to an object or its packaging, along with knowledge of the target sensor model, but does not need access to the robot’s software or control system.
Testing the Technique 🔍
The technique was tested on commercial tactile sensors and real robotic systems, including several PaXini sensor models and a Dofbot-Pi4B robotic arm. In grasping tests, the attack succeeded more than 95% of the time when the contact position was within 8 millimeters of the intended tag placement. If the sensor reports more pressure than the robot is actually applying, the robot can start moving before it has a firm grip and drop the item. Conversely, if the sensor reports too little pressure, the robot can keep squeezing until it damages the object.
The paper also examines how false readings of sideways force could weaken the robot’s grip. In a separate test, a Unitree G1 humanoid robot registered contact before touching a vase or failed to stop before pushing it over, depending on the false reading.
Implications and Recommendations ⚠️
The findings echo a separate study, GhostTac, which examined how electromagnetic interference could manipulate tactile sensors without physical contact. Both studies highlight the risks of relying on potentially manipulated touch readings. Researchers suggest checking touch readings against motor current, joint torque, and movement to identify inconsistent signals. However, they did not evaluate this proposed defense experimentally.
The paper demonstrates controlled attacks, not incidents involving deployed robots.