Yes The Switch 2 Has Been Hacked - Let's Talk About It

Summary

The video examines the early Nintendo Switch 2 hacking scene, emphasizing that “hacked” does not yet mean the console has a permanent jailbreak or custom firmware.

The NS-2JB exploit

Security researcher Pepsi Poo found a way to use SmileBASIC 4, a Nintendo Switch app that runs on Switch 2 through backward compatibility. A flaw in SmileBASIC’s interpreter can be used to gain userland access to the Switch 2 file system. The exploit does not provide kernel-level or boot-chain access.

What the exploit enables

The tethered exploit can run unsigned code and has supported early homebrew demonstrations, game-file modifications, save-file backup possibilities, and access useful for hardware reverse engineering.

It must be launched again after a reboot, and SmileBASIC needs to remain open. Current demonstrations are hosted within SmileBASIC rather than appearing as native Switch 2 apps.

Mario Kart World modifications

The viral clip showing injected characters appears to demonstrate replacement character models and textures loaded at the file level. It does not show that the game executable itself was cracked.

AI’s role

Pepsi Poo reportedly used AI coding agents, including OpenAI Codex, as part of a substantial two-week effort. The presenter cautions against claims that AI independently hacked the console: the researcher directed and coordinated the work.

ROM and asset extraction

A newer tool can retrieve decrypted game assets and executable files over FTP because the console decrypts files as it loads them. This does not expose system keys or provide the complete understanding of firmware and hardware needed for emulators, recompilations, or decompilations.

The presenter expects early extraction work to be particularly useful for data mining and further research.

Nintendo’s response and likely challenges

SmileBASIC disappeared from the eShop shortly after the exploit became public. The presenter expects a firmware update may address the vulnerability, but notes that delisting the app cannot affect consoles that already have it installed.

A web-browser-based entry point and a kernel exploit are discussed as possible future research directions, not established capabilities.

Overall assessment

The Switch 2 exploit is an important proof of concept and a meaningful first step, but it is far short of the original Switch’s mature homebrew ecosystem. Native homebrew, custom firmware, and emulation remain future possibilities rather than demonstrated results.

The presenter anticipates continued rapid developments while warning that reports and videos should be checked carefully.

Reviews, guides, or tutorials

None. The video is a technical news analysis and explainer.

Main speaker and sources

The main speaker is Modern Vintage Gamer. The exploit is attributed to security researcher Pepsi Poo; SmileBASIC is developed by Smileboom.