Reports of a Nintendo Switch 2 firmware extraction arrived on October 25, shortly after the reported October 22 release of ns2jb, the console’s first public software-only jailbreak. The key qualification: the reported files include material available for analysis and files that appear encrypted. That is not the same as a verified, complete, decrypted firmware image—or a complete break of the console’s security.
2
9
What is known about the firmware extraction
The October 25 report attributes the extraction to content creator Senhor Linguica and an extraction tool developed by Kurumuz. It says some extracted files appear encrypted while others can be analyzed, and describes possible research uses such as comparing Switch 2’s operating system with the original Switch and investigating potential security weaknesses. Those are prospective benefits, not confirmation that researchers have found new flaws.
9
Separately, a GBAtemp forum user said a Kurumuz ns2jb fork produced about 223 MB of binary data. That is a community report about a test, not independent confirmation that the console’s full firmware was dumped or decrypted.
39
The distinction matters: an extraction can provide useful system code without yielding every protected component. The available reporting does not establish a complete decrypted firmware image.
9
39
What ns2jb reportedly enables
Security researcher Sammy “pepsipu” Hajhamid released ns2jb on October 22 and reported compatibility with firmware 23.0.1. The exploit is software-only, so it does not require a modchip; it is also tethered, meaning the jailbreak must be run again after the console reboots. Reporting credits OpenAI Codex with helping during the research, but does not support describing the result as an autonomous, one-prompt jailbreak.
2
4
16
The reported exploit chain begins with a 32-bit integer overflow in the backward-compatible SmileBASIC 4 interpreter, then reaches the console’s filesystem service. The resulting access has been used to run native code, homebrew and game modifications, and to extract some game data and system binaries. It is userland or system-service access—not a demonstrated kernel jailbreak.
6
15
16
SmileBASIC 4 was subsequently reported delisted from the eShop. The available sources do not establish that it was removed specifically from both the US and European stores.
14
Extracted files are not the same as playable game dumps
Reports describe files and assets from Deltarune Chapters 1–4 and a beta of The Duskbloods, as well as a Mario Kart World modification demonstrated using ns2jb. These reports show file-extraction and modding activity; they do not establish that complete, playable retail-game images have been independently verified or released publicly.
1
10
14
The same distinction applies to encryption. Some firmware files reportedly appear encrypted, and reporting says game backups cannot be run in emulators without the console’s encryption keys. The sources do not show that ns2jb extracts those keys.
9
14
Emulator claims remain unverified
The ounce-core repository describes a Rust-based, clean-room Switch 2 emulator and claims it can execute native binaries and captured firmware code. Those are claims made by the project itself; the provided material does not independently verify commercial Switch 2 games running on a public emulator.
3
Extracting files and emulating a console are separate challenges: an emulator must reproduce the platform behavior needed to run software, while encrypted game data may also require keys to be usable. The available sources do not establish that hardware reimplementation is the single biggest obstacle, or that the reported firmware extraction has resolved the encryption barrier.
3
14
A WebKit-based route has also appeared in community discussion, but the sources do not verify a released replacement jailbreak. Coverage of Hajhamid’s initial WebKit attempt says it did not succeed.
6
8
13
For now, the strongest supported conclusion is narrower than claims that the Switch 2 has been fully “cracked”: ns2jb has reportedly enabled temporary system-service access, and researchers have extracted some files for analysis. The firmware report may aid further reverse engineering, but it does not by itself prove kernel control, encryption-key access or playable commercial games on PC.
1
9
14
16