PS5 Security Crisis Escalates: The Relapse Jailbreak, the Piracy Store Shutdown, and the Emulator Back-and-Forth#

Zixing | October 15, 2026

Hello everyone, I’m Zixing.

Over the past two weeks, the console-security scene ran an unusually dense series of rounds: the PS5 jailbreak tool Relapse, published on September 29, swept PS5 and PS5 Pro units on firmware 7.00 through 13.60 into its scope, and Sony’s back-to-back firmware releases 14.00 and 14.10 on September 16 and October 1 effectively sealed the relevant vulnerabilities; on October 9, Overdrive, a piracy store targeting jailbroken consoles, went up on GitHub, shut down four days later, and revived within hours as cloned repositories. In the same window, used PS5 Pro units were marked up at GameStop to about 67% above brand-new pricing, while the PS5 emulator KyTyPS5 pushed Demon’s Souls from just over 1 frame to 80-100 fps at 1440p.

As an editor who has long watched hardware and low-level technology, I don’t think this is a story that can be waved through in a line: for the first time, a firmware version directly determined a console’s secondhand residual value, and AI-assisted reverse engineering changed emulator progress from “measured in years” to “measured in weeks”. This article breaks the event down along seven directions; all version numbers, frame rates, and prices follow public reporting, and the stance stays neutral — this article provides no jailbreak tutorials, tool acquisition paths, or piracy resource guidance.

Table of Contents#

1. Two weeks of back-and-forth: the full timeline
2. The jailbreak tool’s boundaries: firmware version decides everything
3. Four days of a piracy store, and the sourcing check
4. The emulator front: AI-assisted reverse engineering as the new variable
5. The used market’s abnormal pricing: software version decides hardware residual value
6. New releases mandate new firmware: a single-question game under supply-chain pressure
7. Player trade-offs and risk warnings
8. Historical context and two new variables this cycle
9. Zixing’s take

1. Two Weeks of Back-and-Forth: The Full Timeline#

First, the whole event laid out in a table. To my mind, this table is itself the most informative part of the story: from firmware patches to tool disclosure to piracy-store shutdown, Sony and the hacking community each completed a full round, at a faster pace than any previous console generation.

Two details deserve expansion. First, 14.00 shipped thirteen full days before Relapse was disclosed, which means Sony most likely knew of the vulnerabilities before the public did — the gap between patching and disclosure is itself part of the rhythm of this contest. Second, firmware 13.60 was released in July 2026, meaning Relapse’s reach covers the vast majority of consoles that never upgraded to 14.00 — the technical premise behind the used-market turmoil later in this piece.

2. The Jailbreak Tool’s Boundaries: Firmware Version Decides Everything#

Relapse’s technical boundary can be summarized in one sentence: the firmware version decides everything. By public reporting, it applies to firmware 7.00 through 13.60 and supports both the PS5 and PS5 Pro model lines; firmware 14.00 and above is unsupported, and Sony offers no official downgrade path — upgrade and the jailbreak capability is gone, irreversibly.

Behind this table is a counterintuitive technical fact: the same PS5 Pro, identical hardware, one firmware version apart, can differ in market value by hundreds of dollars. The reason lies in the console’s security model: once an exploit inside the system firmware is patched by the manufacturer, the public attack path dies, and the console’s signature-verification chain means firmware can only go up, never officially down. “Staying on old firmware” thus turns from an everyday state into a non-renewable resource — the later a console was manufactured or first connected online, the more likely it falls within Relapse’s range.

The affected hardware range is also worth pinning down: Relapse does not distinguish between the standard and enhanced models; the PS5 Pro is equally covered. That is why the used-market turmoil in Section 5 concentrates on the Pro — its brand-new price is the highest ($899.99 as of April 2026), so the scarcity premium on old firmware has the most room.

Now, the technical meaning of “no official downgrade path”. A console’s system partitions carry a signature-verification chain, and official servers only push updates upward — no rollback packages are offered. This is industry-standard design, meant to prevent old-version vulnerabilities from being exploited repeatedly. In this round, its effect is to turn “firmware version” into a one-way valve: the stock of 13.60-and-below only shrinks, never grows; every online update and every new unit shipping with new firmware physically consumes the remaining window. Conversely, as long as a console has never gone online and updated past 14.00, it keeps holding that non-renewable ticket — which is the entire technical basis for “old firmware” commanding a price tag.

One more easily missed timing detail: firmware 13.60 was released in July 2026, and the highest firmware Relapse supports is exactly 13.60. In other words, the “endpoint” of the exploit’s range is a firmware three months old, and every version Sony has shipped since September 16 is outside it. For ordinary users, checking whether your console sits inside the window requires only looking up the firmware version number in system settings and confirming it is no higher than 13.60 — this is the only, and entirely neutral, “self-check” this article can offer.

3. Four Days of a Piracy Store, and the Sourcing Check#

The Overdrive story’s propagation chain is textbook, worth replaying in full. By public reporting, the timeline is:

• Up on October 9: this unofficial game store for jailbroken PS5s went live on GitHub, offering 1,600+ PS4/PS5 games and DLC for free download. Visible titles included Black Myth: Wukong, Marvel’s Spider-Man 2, Cyberpunk 2077, Resident Evil Requiem, and 007 First Light; another source counted the catalog at more than 1,800 titles — the two figures differ, and this article uses the more conservative “1,600+”.
• Breaking out on October 11: homebrew content creator Edigax posted a hands-on video on X; it was then forwarded by many accounts and gathered about 7 million views. Combined with tools like ShadowMountPlus, content downloaded from the store appeared directly on the PS5 home screen — the “works just like the official store” experience threshold dropped sharply, the key step in the story jumping from geek circles to ordinary players.
• Down on October 13: X user Oliver Darko (@oliver_drk) said SIE lawyers had sent the Overdrive developer a cease-and-desist; the store came down and the GitHub repo 404’d; from the same day, users updating the app received a “store has closed” notice.
• Back within hours: within hours of the shutdown, two new repos appeared on GitHub — a fork of the original project and a clone under a different account. In terms of reach, this shutdown’s long-term containment effect is quite limited.

A word more on the fork-and-clone revival mechanism: on open-source hosting platforms, any repo may have been fully copied before deletion; forking is a native platform feature, and re-uploading under a new account takes minutes. For a project whose content has already spread widely, “delete the repo” removes the official entry point, not the content itself. What actually brought the Overdrive store to a stop was the project side emptying the content and the server-side “store has closed” notice — both of which happened on the project side, not the hosting-platform side. This detail is useful for understanding Sony’s later strategy: deletion at the platform layer has limited deterrent power; the effective tools remain firmware-layer sealing and account-system constraints.

What must be spelled out separately is the sourcing problem — the easiest place for technical reporting to slip:

1. “SIE lawyers sent a letter” currently rests on a single X account, Oliver Darko — no letter document made public, no Sony statement, no confirmation from the Overdrive side; multiple outlets used “reportedly” in their coverage. Sony has never officially confirmed sending any letter, and this cannot be omitted when citing.
2. Overdrive’s own site was not taken down through a DMCA process; the project side emptied the content itself.
3. The only thing that can be asserted with certainty is the outcome itself: the store is closed. Whether a letter was sent, and through which legal path pressure was applied, remains blank in verifiable-evidence terms.

For an editor who does technical breakdowns for a living, this “unverified shutdown narrative” is itself an information-science specimen of this cycle: neither side of the contest issued an official statement; the narrative was assembled entirely by third-party observers; and most of those forwarding it did not distinguish “reportedly” from “confirmed”. That is why the sourcing check gets its own section.

4. The Emulator Front: AI-Assisted Reverse Engineering as the New Variable#

Among the chain reactions of the jailbreak ecosystem, emulators are, to my mind, the most technically substantive part. After Relapse’s disclosure, PS5 homebrew flooded in — emulators, launchers, streaming tools, even a reported case of running Xbox cloud gaming on a PS5 (that case appears only in brief retellings by Chinese-language media, with no primary technical source; treat it as directional information). Another roundup claims jailbroken PS5s can already run emulators or ports for Switch, PS2, original Xbox, Xbox 360, Wii, Wii U, GameCube, 3DS, SNES, and other platforms — though performance is uneven, and “actually good to use” remains out of reach for most.

What really deserves attention is emulation of PS5 games themselves; this round has three specimens:

4.1 KyTyPS5: six weeks from 1 frame to 80 frames#

KyTyPS5 is an open-source PS5 emulator project written in C++ (supporting Windows and Linux). Its significance to this round is the frame-rate climb of Demon’s Souls:

Six weeks to cross what amounts to four orders of magnitude of progress — that pace has no precedent in the history of PS3 and PS4 emulator development. Two caveats from the community should be noted: first, whether the 80-100 frames benefited from frame generation (frame interpolation) has received no official response; second, the results rest on flagship hardware like the RTX 5090 plus Ryzen 7 9800X3D, so the barrier for ordinary users to replicate them is high. Both points are community-sourced; this article relays them as-is and does not vouch for the project.

Another specimen is Marvel’s Wolverine: on KyTyPS5 it reached a maximum of 20 frames days after first boot (RTX 4080 + 9800X3D), with most scenes still at 6-9 frames. By comparison, Demon’s Souls has progressed visibly faster — emulator compatibility is a per-game engineering effort; one game running smoothly does not mean all games run smoothly. That is the most important technical premise for judging claims like “the emulator is playable now”.

4.2 ShadPS4’s AI case: one PS4 game running in 24 hours#

On the PS4 emulator ShadPS4 side came an even more talked-about case: someone used fine-tuning built with Claude Opus 5.5 to get Infamous: Second Son running smoothly at native 4K in under 24 hours. The news circulated in an October 2 tweet, and the private build has not been released for download — its significance lies not in usability but in a feasibility demonstration: AI-assisted reverse engineering compressed “years of one person’s reverse-engineering effort” into days.

4.3 AnyPS5: AI disclosure becomes a community norm#

Another native PS5 emulation project, AnyPS5, released its first version in late September. By public reporting, on its Linux branch Astro Bot can already be played from the opening cutscene to the crash-site tutorial and into the Sky Garden area; the Windows branch manages only 5-10 frames and drops to 0.1 frames — branch divergence is itself normal in emulator development, and the maturity of the graphics API translation layer directly determines progress.

What is more worth recording about AnyPS5 is its contribution policy: the project requires contributors to state whether fixes received AI assistance, with multiple fix reports signed “Investigated with AI assistance (Claude Code)”. At the same time, the community has criticized its “vibe coding” — arguing that many AI-generated patches lack human verification. As a technology observer, I think the appearance of both at once shows precisely that AI-assisted reverse engineering has moved from “can it be used” to “how is it governed”; the emergence of disclosure norms is a sign of the community engineering itself.

Putting the three projects side by side clarifies this round’s “AI-assisted emulation” technical map:

Three rows of a table hold three different uses of AI: KyTyPS5 is “acceleration observed by the media”, ShadPS4 is “a reproducible one-person demonstration”, AnyPS5 is “institutionalized disclosure”. Whichever it is, the direction is the same — the bottleneck steps of reverse engineering (analyzing closed-source binaries, guessing data structures, verifying graphics calls) are precisely the pattern-matching work large models are best at. That is the technical explanation for this round’s steep progress curve.

5. The Used Market’s Abnormal Pricing: Software Version Decides Hardware Residual Value#

The combined result of the piracy store breaking out and the jailbreak tool’s disclosure was written straight onto retail price tags. Around October 6, GameStop priced used PS5 Pro units far above the brand-new official price:

A leaked internal memo described the strategy as “intentional” (per the reporting The Daily Game cited). A retailer openly admitting it sells used consoles at a premium is rare in console-sales history, and the premium rests on three stacked factors:

1. The official price itself has been climbing: the PS5 Pro’s US price rose from $699.99 at launch in November 2024, to $749.99 in August 2025, to $899.99 on April 2, 2026. The “anchor” for used pricing has itself been rising.
2. Widespread new-unit shortages: around October 6, reports said Sony Direct, Amazon, Best Buy, Walmart, and GameStop were all out of stock; a tightening supply side amplified the scarcity.
3. The jailbreak scarcity of old-firmware consoles: only consoles whose firmware falls within Relapse’s range can be jailbroken, and the stock of old-firmware units is being consumed. Push Square reported GameStop seeing “jailbreak-capable firmware consoles being swept up”.

A bucket of cold water is required here. Game-collectible speculation is not new — in January 2026, the PS4 disc edition of Star Wars Racer Revenge was hyped from roughly $30 for the limited release to over $250, because jailbreak scenarios exploit its PS2 emulation capability. But the PS5 Pro speculation is more fragile: its premium rests on the assumption that “the firmware window stays open”, and that window is precisely the most uncertain variable of this whole contest. The buyer paying $1,499.99 for a used Pro is, in effect, buying a wager against Sony’s future firmware strategy.

6. New Releases Mandate New Firmware: A Single-Question Game Under Supply-Chain Pressure#

If the preceding sections were about the installed-base game, this section is about the incremental market’s root-cutting move: new games are becoming the most effective distribution channel for new firmware.

Per findings by the dataminer PlayStation Game Size, the release build of Grand Theft Auto VI requires the latest firmware 14.10 to run — note this is a datamined account; Rockstar has not confirmed it, and the actual requirement will be what the game’s official notes say at launch. The game is scheduled for November 19, 2026.

This information forms a textbook structural hedge against the jailbreak window:

• Players who want the jailbreak need to stay on firmware 13.60 or below, and Relapse does not support 14.00 and above;
• Players who want to play Grand Theft Auto VI on launch day must, by the datamined account, upgrade to 14.10;
• The two demands are mutually exclusive on the same console, and on the used market “old-firmware machines” and “machines that run new releases” are splitting into two markets.

The impact on winter blockbuster buyers is direct: anyone buying AAA new releases during the launch window effectively has little choice — day-one patches and new-firmware requirements usually arrive bundled. A separate single-source report said Sony’s new batches of PS5 Slim ship from the factory with firmware 13.20, within Relapse’s supported range; the claim has not been cross-verified by mainstream media and is for reference only. From the supply-chain view, Sony holds a low-cost optimal solution: as long as new releases keep requiring new firmware, the stock of old firmware only shrinks, the jailbreak window closes naturally with time, and Sony need not launch any active crackdown at all.

7. Player Trade-Offs and Risk Warnings#

This section is for ordinary players. The conclusion first: whether to upgrade depends on what you want, not on what the community is arguing about. The table below organizes the decision logic by player type:

Whichever path you choose, read this risk list first:

• Ban risk: per HotHardware’s warning, using exploits like Relapse can lead to account and console bans. Online services and your digital library both live inside the account system; the cost of a ban exceeds one console.
• Legal boundary: circumventing console access controls is constrained, where US law applies, by Section 1201 of the DMCA (17 U.S.C. §1201) — the statutory framing Gizmodo cited. Specific application varies by jurisdiction, but “circumventing technological protection measures” is itself in gray or violating territory in most places.
• Warranty: jailbreaking depends on unauthorized modification of the system area and counts as a modification that manufacturer warranty terms typically exclude from normal coverage — standard industry practice; how Sony after-sales would handle it in this case has no public precedent yet.
• Security exposure: jailbreaking is at bottom a loosening of the system’s default security boundary; homebrew installed from unofficial channels has passed no supply-chain review, and its origin and behavior depend entirely on whoever published it. The hosting location of Overdrive’s files and the identity of its operators remain unknown to this day — which is itself a risk statement.

Restating the stance one last time: this article only does factual replay and risk analysis; it provides no jailbreak tutorials, tool acquisition paths, or piracy resource guidance. The value of security research is exposing problems and driving protection, not bypassing payment.

8. Historical Context and Two New Variables This Cycle#

Placed in the general cycle of console security contests, the structure here is not new: vulnerability exists → tool published → vendor patches → new releases mandate new firmware → window closes. Sony has followed this script at every step this round: the 14.00 and 14.10 firmware patches, the new-release firmware requirement, the shutdown pressure on the piracy store. The January 2026 price anomaly of the Star Wars Racer Revenge disc also shows that “software version tied to hardware residual value” appeared back in the PS4 era; this round only scales it up to the whole console.

The genuinely new variables are two.

Variable one: AI-assisted reverse engineering compresses the cracking cycle from “years” to “weeks”. KyTyPS5’s frame-rate trajectory is direct evidence: a AAA title went from 1-2 frames at first boot to 80-100 frames at 1440p in about six weeks; ShadPS4 saw a private build reach native 4K in under 24 hours; AnyPS5 wrote AI assistance into its contribution disclosure policy. Console emulators used to mature on a scale of years; this cycle, the community is already discussing progress curves “measured in weeks”. This does not change the fundamental structure of the contest, but it significantly compresses Sony’s response window.

Variable two: the speed of content propagation has changed what a takedown means. Overdrive went from listing to 7 million views in two days, and from shutdown to cloned-repo revival in hours. The marginal effect of single-point takedowns — legal or otherwise — against this propagation speed is diminishing; the containment that actually works remains at the firmware and supply-chain layers, which also explains why Sony’s focus has stayed on 14.00, 14.10, and the new-release firmware requirements, with no public action against the jailbreak tool itself.

A positive counterpoint along the way: Sony recently brought QSSR (an AI upscaling technique, conceptually similar to the PS5 Pro’s PSSR) to the base PS5, delivering sharper, more stable image quality. The same AI technology base — used by the official side for image quality, by the community for reverse engineering. That is probably this cycle’s most telling technical mirror.

9. Zixing’s Take#

Finally, three judgments of mine, for your reference:

1. Firmware version has formally become a pricing variable for used consoles. “Software version decides hardware residual value” has gone from a collectible-disc curiosity to a general phenomenon in the console market. Used buyers should ask for the firmware version when negotiating price from now on — as important as checking condition and verifying accessories. Whether to pay the premium, of course, is yours to compute against the Section 7 risk list.
2. Emulator narratives must be judged game by game. Demon’s Souls at 80-100 frames at 1440p on flagship hardware is a fact, but most games are still in the single-digit-to-twenty frame range, and the community’s questions about interpolation and flagship dependence remain unanswered. Conclusions like “the emulator works now” currently hold only for a handful of games on a handful of configurations.
3. This contest is far from over. As of this writing (October 15, 2026), Sony has not publicly confirmed any legal action over Overdrive, and there are no public reports of mass bans; the repo’s forks and clones persist. The next node worth watching is Grand Theft Auto VI’s launch on November 19 — if the datamined firmware requirement is accurate, that week is the real watershed of this cycle: the stock of old firmware and the supply of new firmware will face a grand reckoning on the same day.

Technical contests have no endgame, only rounds. As an editor who has watched console-hacking cycles for over twenty years, my advice is always the same: treat security incidents as a window into platform architecture, not a shortcut around the rules. The health of the games industry ultimately rests on players willing to pay for good work.

— Zixing, NTGame Hardware Editor