Yeah I wanted to try this on an old trezor, but gave up when I couldn't find a suitably cheap glitching solution.
Looks like the cost will be closer to $1000 and more likely to work with firmware 1.5.1 or older.
That's as far as I got... Keen to find out more though.
VoidStar Security Blog
Replicant: Reproducing a Fault Injection Attack on the Trezor One
This post aims to provide a road map and example of how to replicate a fault injection attack and the hurdles and shortcomings that can occur when ...