Months of expert security research. A carefully preserved exploit. A plan timed around GTA VI. All of it collapsed because some LLM-assisted modders found the last working PS5 Pro hypervisor bug, promised to sit on it, and then reported it to Sony for a 2FA exploit bug bounty payout. Andy “TheFlow0” Nguyen, the security engineer behind the PS5 Linux project, announced his departure from the PS5 scene in September 2026, and he wasn’t quiet about why.
The GTA VI Gambit
Nguyen built a working Linux environment for PS5 hardware, then quietly gambled everything on one unreported exploit.
PS5 Linux turns compatible PlayStation 5 “Phat” consoles into fully functional Linux machines, capable of running Steam, emulators, and a complete Ubuntu 24.04 desktop environment. The project, publicly released on GitHub, exploits a hypervisor vulnerability across firmware versions 3.xx through 6.02, with M.2 SSD support and fan and CPU-GPU control utilities included.
Nguyen had been quietly holding back one remaining PS5 Pro hypervisor bug, intentionally unreported, as a calculated bet. The plan was to keep that exploit alive long enough to release PS5 Pro Linux support in 2027. The timing was deliberate: modded consoles would be ready to legally purchase and run GTA VI on Linux hardware.
“I am stepping away from the ps5 scene and stopping all my work on ps5 linux. After pouring my heart and months of my life into it, including plans to finish ps5 pro support and release in 2027, it’s all down the sink.”
Andy Nguyen (TheFlow0), security engineer and PS5 Linux lead developer, in a post on X.
The Bug Bounty Betrayal
The exploit that was supposed to outlast a console generation lasted just long enough to get patched.
According to Nguyen’s posts on X, corroborated by multiple tech outlets, LLM-assisted modders found the last remaining PS5 Pro hypervisor vulnerability. They brought it straight to Sony’s bug bounty program. He says he contacted them directly and asked them to wait until after GTA VI’s release; they agreed, then filed with Sony anyway.
Nguyen described the current PS5 modding scene as “just a bunch of noobs using LLMs and writing hacks they don’t even understand,” and labeled the reporters “slop kiddies“ in posts on X. The tension here is structural, not just personal. Bug bounty programs reward whoever reports first, which directly conflicts with homebrew culture’s need to keep exploits alive, and Sony’s program worked exactly as designed.
There is a specific kind of irony in AI tools being used to locate an exploit that a human expert spent months strategically protecting: the sous chef used a recipe app to sell the secret ingredient to the franchise.
The ps5-linux repository remains live on GitHub under GPL v3.0, meaning anyone can legally fork it and distribute modifications freely. PS5 Pro support was never published, though, so any community developer picking this up starts that work from scratch. Whether the homebrew scene has the depth to fill that gap is, for now, an open question.
