PS5 Hacker Quits Over Exploit Drama and GTA 6 Timing

One of PlayStation’s most respected independent researchers has withdrawn entirely from the PS5 modding and hacking community, citing the breakdown of trust among peers. TheFlow, a prominent figure known for discovering critical vulnerabilities in Sony’s hardware, announced on social media that months of work on a Linux port for newer PS5 models would not see release. His decision came after a fellow hacker chose to report a shared security exploit to Sony through HackerOne, a bug-bounty platform, despite an earlier agreement to withhold disclosure until after Grand Theft Auto 6 launches.

The Linux Project and Its Potential

TheFlow’s work represented a significant technical achievement within the independent research community. Earlier this year, he released video demonstrations of a fully functional Linux environment running on a PS5, complete with Grand Theft Auto 5 Enhanced featuring ray-traced graphics. The accomplishment transformed the console into what amounted to a custom Steam Machine, capable of running desktop-class software alongside native gaming applications.

Initial prototypes operated on older PS5 firmware versions, where the exploit proved reliable. TheFlow’s stated ambition extended further: bringing Linux compatibility to the PS5 Pro while maintaining support for the latest firmware iterations from Sony. Working toward these goals required extensive reverse-engineering of the console’s hypervisor, the low-level security component responsible for preventing unauthorized code execution and protecting against piracy.

Why GTA 6 Mattered to the Timeline

The timing of TheFlow’s planned 2027 release was deliberate. Grand Theft Auto 6 will launch as a digital-exclusive title, requiring all players to purchase through the PlayStation Network. Accessing the PSN store demands that consoles run the current firmware version from Sony. Once the publisher became aware of the hypervisor exploit, a security patch would arrive within days or weeks. By delaying public release of his Linux modification until after GTA 6’s arrival, TheFlow sought to ensure that players could both purchase and activate the latest game while retaining the ability to use his software simultaneously. The window for achieving this closed on September 15.

The Reported Exploit and Jordy’s Position

Read also: Why Diablo Himself Never Became Diablo 4 DLC · Content Creator Accused of Opening Stolen Pokémon 30th Anniversary Cards · Blizzard Stands by Spring 2029 Diablo 5 Release Despite Industry Doubts · Steam Flooded With Clones After Needle in a Haystack Simulator Goes Viral

Jordy, a separate hacker who employs artificial intelligence tools to assist in his modding and reverse-engineering work, independently discovered the same hypervisor vulnerability. In conversations with TheFlow, Jordy agreed not to disclose the finding until after GTA 6’s release, mirroring the original timeline. The situation changed when another community member also located the exploit. Facing what he described as an inevitable cascade of independent discoveries that would eventually trigger competing bounty submissions, Jordy filed a report with HackerOne on September 15.

The Financial Context

Jordy’s decision carried personal weight beyond typical bounty considerations. Multiple community members have stated that Jordy’s mother is living with a terminal illness, creating genuine financial pressure to secure any available funds. HackerOne offers substantial payments for verified exploits, potentially worth thousands of dollars depending on the severity and confirmation process. Jordy reasoned that delaying would only increase the likelihood of other researchers claiming the bounty instead, especially given the apparent ease with which AI-assisted tools could locate the vulnerability.

TheFlow’s Immediate Response

TheFlow posted shortly after the exploit became public knowledge that he was abandoning the PS5 project entirely. His statement expressed frustration with the current state of the hacking community, describing it as overrun by inexperienced participants using large language models to discover vulnerabilities they did not understand. He specifically referenced “slop kiddies” finding the exploit and reporting it to Sony. While TheFlow did not name Jordy directly in his posts, community members quickly identified the reference based on prior public discussions between the two hackers. TheFlow confirmed that Jordy had agreed to wait but broke the commitment within a day.

The Community Fracture

Response within the PS5 jailbreak community split along multiple fault lines, creating what observers have labeled as “Team Jordy” and “Team TheFlow” factions. Supporters of Jordy’s action emphasized that he conducted independent research and discovered the exploit himself, giving him legitimate claim to any associated bounty. From this perspective, personal financial hardship represents a reasonable justification for not waiting indefinitely. Supporters noted that Jordy had been asked to withhold disclosure but faced no contractual obligation to do so.

TheFlow’s defenders argued that Jordy had handed Sony a valuable tool to defend its closed ecosystem at precisely the moment when widespread Linux adoption on PS5 hardware might have become possible. The exploit represented potentially the last viable route to liberating PS5 systems for users who wanted to repurpose their consoles as general-purpose computing devices. By reporting it immediately, Jordy ensured that Sony would patch the vulnerability before the community could consolidate the Linux project for broader availability.

Alternative Paths Not Taken

Some community members noted that bounty options existed outside HackerOne’s formal relationship with Sony. A community-funded bounty allegedly totaling over $37,000 had been proposed as an alternative mechanism to keep the exploit away from the manufacturer while providing Jordy with substantial financial support. The proposal presented its own complications: accepting community funding might have compromised either Jordy’s or TheFlow’s ability to claim future PlayStation bounties on HackerOne, creating a permanent trade-off between immediate need and long-term earning potential from security research.

Sony’s Response and Timing

Sony released a new PS5 firmware update on Wednesday following the HackerOne report. Community members, including Jordy himself, issued warnings against updating for anyone intent on continuing to use jailbreak modifications. The timing confirmed what the scene had anticipated: Sony treats reported exploits with urgency, patching vulnerabilities as quickly as the firmware release cycle permits. The new update likely addressed the hypervisor vulnerability, rendering TheFlow’s years of research incompatible with current systems.

Broader Questions on AI and Community Standards

TheFlow’s criticism of AI-assisted hacking reflects growing tension within independent security research communities. Large language models can identify patterns and suggest exploit techniques that previously required specialized expertise and institutional knowledge. This accessibility democratizes vulnerability discovery while potentially lowering the common standard of understanding within the field. Researchers who use these tools without comprehending the underlying security mechanisms may inadvertently create inconsistency about when and how exploits should be disclosed.

The incident raises unresolved questions about community norms and individual responsibility. No formal governance structure binds PS5 hackers to agreed timelines or conduct standards. Verbal commitments, no matter how serious, lack enforcement mechanisms. Jordy’s actions were legal and within HackerOne’s guidelines, yet violated a personal agreement that held significance to TheFlow and others who valued the collaborative vision of bringing open-source software to closed gaming hardware.

What Remains Ahead

TheFlow’s departure does not end the PS5 Linux project entirely. Other researchers and community members have indicated plans to continue the work, though the loss of a central figure and the patched exploit will substantially complicate progress. The timeline for Linux support on newer PS5 models, including the Pro variant, will extend considerably beyond the 2027 target. Development that might have produced a functional release within months now faces the challenge of discovering new vulnerabilities or working around Sony’s updated security measures.

Sony’s position has strengthened as a result of the events. The company faced no financial consequences for the exploit’s disclosure, and the responsible-disclosure process actually expedited the patch cycle. From a business perspective, keeping PS5 devices locked to official software maintains the closed ecosystem that supports digital game sales through the PlayStation Network. GTA 6’s digital-only release strategy depends on this control, and the vulnerability that threatened it is now neutralized.