Micro-probing the bus lines, to disable the self-destruct or time-delay counter ? Or perhaps &quot;glitching&quot;, sending badly-timed signals to the specific part of the asic that keeps count of the number of bad tries, causing it to lock up. Then brute forcing it at high speed.