PS5 Bug Bounty Sparks Homebrew Boom—and GTA 6 Piracy Roadblock

WHO:

Kotaku - PlayStation hacker Jordy, who uses the handle 2tonejordy, reported a PS5 hypervisor exploit to Sony through HackerOne and received a $50,000 bounty.

IGN - Jordy said he used generative AI to find the vulnerability and denied being coached by Google security engineer Andy Nguyen, known as theflow0.

IGN - Nguyen had found the same bug earlier and wanted researchers to delay reporting it; he said he was stopping his PS5 Linux work.

IGN - Jordy said his mother is terminally ill and that the bounty would give him time with his family and to care for her.

IGN - Madwax0r, creator of the PS5 emulator tracker and scam blacklist Kaishaku, described why some players wanted the exploit kept unpatched.

IGN - Cybersecurity researcher Eric Parker said he imagined another PS5 exploit would probably be found.

WHAT:

Kotaku - Jordy’s disclosure sparked backlash in the PlayStation homebrew community, with critics arguing it could prevent piracy of Grand Theft Auto VI at launch.

IGN - The vulnerability is a hypervisor bug affecting PS5 firmware versions 13.60 through 14.00. It can enable kernel-code execution, including booting Linux.

IGN - Sony issued a PS5 firmware update that some believe targets jailbreak efforts. The articles say the exploit could be patched before GTA VI’s release.

IGN - Players wanting Linux and GTA VI on one console may have to keep the PS5 offline to use Linux or update it for GTA VI and lose access to Linux.

IGN - Jordy said, “I will continue to research,” but added, “Just really no time lately.”

WHERE:

IGN - The exploit concerns Sony’s PlayStation 5 console; the proposed Linux setup could run from an external USB drive.

WHEN:

Kotaku - Jordy announced the $50,000 bounty on X on October 14, 2026.

IGN - Nguyen showcased his PS5 Linux work in March; Jordy said Nguyen had found the bug in 2025.

Kotaku - The articles identify November 19 as GTA VI’s release date. IGN says Sony requires the latest firmware and a PSN sign-in to download and play it.

IGN - Nguyen had planned PS5 Pro support and a Linux release in 2027.

Kotaku - Sony’s decision to stop manufacturing physical PS5 media by 2028 is cited as a source of resentment.

WHY:

IGN - Jordy said he reported the bug after another researcher also found it using generative AI: “If I and another person can find it with LLM, so can someone else.”

Kotaku - Jordy reported it and claimed the bounty before another researcher could do so; the article notes his financial and family circumstances.

IGN - Nguyen wanted to wait until GTA VI launched so players could update their consoles, play the game legally, and retain the unpatched exploit for Linux.

HOW:

IGN - Sony’s HackerOne program pays researchers who report vulnerabilities and withholds public release until Sony patches them.

IGN - AI-assisted research led multiple researchers to find the same bug, according to Jordy and madwax0r.

IGN - A hypervisor exploit can provide access to kernel code, enabling modifications such as booting Linux; reporting it gave Sony an opportunity to patch the flaw.

(UPDATED October 27, 2026 07:18 UTC)

PlayStation hacker Jordy, known as 2tonejordy, received a $50,000 Sony bounty after reporting a PS5 vulnerability that can enable kernel-level access and boot Linux. Jordy said generative AI helped him find the bug, and he reported it because another researcher had also discovered it; he said the money would give him time with his terminally ill mother. His disclosure angered some homebrew fans who hoped to use Linux and play Grand Theft Auto VI on the same console, but Sony’s latest-firmware requirement for the game could mean updating and losing access to the exploit or keeping the PS5 offline.