This Coin-Sized Device Can Hack a Boeing 737
A viral claim about a 60-second airplane hack reopens a debate the aviation industry has been quietly avoiding for years.
Written by OutOfToken AI
August 12, 2026 · 4 min read · Synthesized from reporting by Wired · How this works
A claim making the rounds this week is unsettling by design: pop open an exterior hatch on a Boeing 737, plug in a device no bigger than a coin, and within a minute you've got a foothold into the aircraft's autopilot or flight plan. The specifics of that scenario haven't been independently verified. But the underlying anxiety it taps into is very real, and well documented.
The Claim vs. The Evidence
No security research reviewed publicly corroborates a coin-sized device breaching a 737's autopilot in under 60 seconds through an external hatch. That specific mechanism, device, and timeline appear nowhere in confirmed vulnerability disclosures from Boeing, the FAA, or DHS. What is confirmed is broader and, in some ways, more concerning: Boeing aircraft have documented cybersecurity weaknesses, and the industry's own testing has proven physical access to certain systems can be exploited.
DHS Already Proved the Concept
In 2017, the Department of Homeland Security ran a test on a Boeing 757 and found it vulnerable to remote hacking without ever needing to modify the plane physically. That test alone triggered alarm across the industry, because unlike newer jets, older 737 and 757 airframes weren't engineered with cybersecurity as a founding principle. Boeing has since said newer aircraft, including the 787, and Airbus's A350, were designed with security baked in from the start — an implicit admission that older fleets were not.
"Changing a single line of code on avionics equipment can cost around $1 million and take a year — a bottleneck that leaves known software vulnerabilities lingering far longer than in almost any other industry."
The Chris Roberts Precedent
This isn't the first time a hacker has claimed to breach a commercial flight mid-air. In 2015, researcher Chris Roberts told investigators he'd tapped into a plane's in-flight entertainment system and, from there, potentially reached engine controls — even suggesting he could trigger oxygen masks. United Airlines alerted the FBI, which investigated Roberts extensively, but no confirmed successful takeover of flight systems was ever established. The episode nonetheless became the reference point for every airplane-hacking story since, this one included.
Why the Threat Model Is Shifting Anyway
Regardless of whether the coin-sized device story holds up, aviation's attack surface is expanding on its own. Boeing and the FAA are moving toward internet-connected systems like IPS, a satellite- and cellular-linked platform designed to replace decades-old analog VHF radio coordination with real-time 4D flight path data. Systems like ADS-B, which broadcast GPS-derived position and speed for every aircraft in U.S. airspace, add more connected surface area than the 1950s-era radio infrastructure ever had.
The uncomfortable truth is that aviation cybersecurity doesn't need a viral coin-sized gadget to be a real problem — DHS, the FBI, and Boeing's own engineering choices have already confirmed that. Whether or not this particular hack is real, expect scrutiny of aircraft software security to intensify as planes get more connected, not less.
Editorial Note
The article's core claims about DHS testing, code modification costs, and the Chris Roberts incident are all verified by credible sources. The article appropriately distinguishes between the sensational viral claim (unverified) and documented vulnerabilities (verified). Research confirms Boeing's cybersecurity weaknesses and the industry's known challenges, though it does not support the specific coin-device scenario presented in the headline.
Claim Tracker
AI-assessed
Source 2 (Aviation Tech Today) confirms DHS tested Boeing 757s and found them vulnerable to hacking, establishing the 2017 timeframe and remote access vulnerability.
Source 2 (Aviation Tech Today) explicitly states: 'The cost to change one line of code on a piece of avionics equipment is $1 million, and it takes a year to implement.'
Source 2 (Aviation Tech Today) confirms that 'newer models of 737s and other aircraft, like Boeing's 787 and the Airbus Group A350, have been designed with security in mind.'
Source 5 (CNN/FBI) confirms Roberts claimed to hack into in-flight systems and activate emergency oxygen masks on a United flight in April 2015.
The article itself states 'The specifics of that scenario haven't been independently verified' and 'No security research reviewed publicly corroborates a coin-sized device breaching a 737's autopilot in under 60 seconds.' Research sources contain no corroborating evidence for this specific claim.
Ask AI about this story
// discussion
sign in to join the discussion