Nintendo Switch 2 firmware version 23.5.0 appears to have been hacked days after the console maker patched a major security exploit.
Security researcher invokertr took to Twitter/X to share a video clip showing a new exploit they discovered in the current Nintendo Switch 2 firmware, version 23.5.0. They claimed that have obtained a complete software dump (European region) of the console’s latest Software Development Kit (SDK) as well as the latest firmware.
Nintendo released Switch 2 firmware 23.5.0 on November 10, 2026. The update patched the previously discovered operating system vulnerability used by the ns2jb jailbreak, which worked on firmware 23.0.1. The SDK leak effectively means that Nintendo’s updated development tools have been exposed, allowing reverse engineering and emulation/recompilation efforts to continue for future Nintendo Switch 2 titles.
“The hybrid operating system idea is great, nintenDON’T,” said the hacker. This may be a reference to Nintendo’s underlying OS architecture. They appear to be complimenting the console maker’s system software design while mocking its security efforts at the same time.
When asked to wait for games like Metroid Ravenous and Xenoblade Genesis to be released before making the exploit available to the public, the security researcher made it clear that they won’t release the hack until there is a “serious fix for the HackerOne payouts,” likely referring to claiming a bounty from Nintendo via the cybersecurity platform.
Fellow security researcher Sonic_Iso, known for their work on the PS5 jailbreak, endorsed invokertr, saying that they are “as legit as they come.”
Recently, it was reported that Nintendo has remotely blacklisted both SmileBASIC 4 and Civilization VII on Switch 2 firmware version 23.0.1, potentially through BCAT or a rebootless update. Both titles are known to be the entry point for exploits. This highlights a potential issue with 90DNS when IPv6 is enabled, where the Switch 2 may bypass the intended restrictions still reach Nintendo’s servers through the IPv6 DNS supplied by the router.
