PS5 Linux exploit earns researcher $50,000, sparking backlash

A researcher who used a large language model to find a PS5 hypervisor vulnerability, one that allowed Linux to be installed on the console, has won a $50,000 bug bounty from Sony. The researcher, known on X as Jordy, shared the payout from his own account, and the post drew an unexpected wave of criticism.

The row is not only about the size of the reward. It also concerns the timing of the report and the method used to find the flaw. Jordy admits he had agreed with another researcher to hold off disclosure until after GTA VI launched, yet he sent the report anyway. Sony's patch has now closed the hole, leaving users who want to run Linux on their consoles facing a new dilemma.

The bounty post and the reaction

Announcing the payout, Jordy said he figured he could at least use the money to buy GTA 6. Most of the replies underneath were critical. One user asked whether $50,000 was worth losing friends over, while another argued that Jordy had not found the flaw himself and that the real work was done by Andy Nguyen, known as flow0.

Another commenter said the issue was never about making money, since the point of hacking the PS5 is freedom, ownership and control. In that view, Sony is acting against everything the community stands for, and anyone who needs cash has plenty of other bug bounty programs to turn to.

The broken promise and Nguyen's exit

The ps5-linux-loader project on GitHub requires a PS5 Phat, Slim or Pro running firmware between 3.00 and 13.60. It is unclear whether Sony knew about the flaw in advance, but the company closed it with firmware 14.20, released on October 21, 2026. Because new games often require up-to-date system software, users who want to try Linux will now have to choose between Linux and playing GTA VI on launch day.

Nguyen said he had asked Jordy to hold the report at least until GTA 6 came out, so that people could buy the game legitimately and still benefit from Linux. He wrote that Jordy agreed but backed out within a day. Nguyen also announced that he is leaving the PS5 scene and abandoning all his PS5 Linux work, adding that his planned 2027 release of PS5 Pro support is now wasted.

The AI debate and Jordy's defense

Nguyen argued that the scene once consisted of skilled researchers but is now in the hands of novices who use large language models to write exploits they do not understand. He said such people found and reported the last remaining hypervisor flaw, which he says he had also discovered some time earlier.

Jordy confirmed he had agreed with Nguyen to delay the report. He said, however, that other researchers were also finding the flaw with generative AI, which put his payout at risk. In his words, if he and one other person could find it with an LLM, a third person could too, so he decided to report it.

AI can be a useful tool for professionals hunting vulnerabilities, but it has also swamped many bug bounty programs with AI-generated submissions. Google froze its program until 2027, and Linus Torvalds moved the Linux security mailing list to a public system after it became nearly unmanageable. According to reports, AI-found CVEs now reach as many as 2,000 per release.

Tension in the PS5 scene

The PS5 has recently become a focus of hacking, emulation and jailbreak work, a trend that picked up after Sony announced it would end physical game disc production by January 2028. The company reportedly did not back down despite the backlash, and is said to have threatened to cut off support and pursue legal action against unhappy customers who harassed it. Combined with Jordy's use of AI and his decision to share the $50,000 payout, these developments have angered much of the PS5 jailbreak community.