Recent developments regarding the Nintendo Switch 2 security have highlighted a new milestone in console hacking, as file extractions from prominent titles such as Deltarune Chapters 1 to 4 and The Duskbloods surfaced on social media. While these findings represent significant progress for security researchers, they do not yet constitute a fully realized jailbreak, as functional ROMs running on third-party emulators remain unachieved.
The exploratory tool, dubbed ns2jb and developed by researcher pepsipu, leverages a file system vulnerability within the console, specifically exploited through the application SmileBASIC 4. This method enables unauthorized code execution and game modifications, a capability previously showcased by custom character integrations in Mario Kart World.
NEW SWITCH 2 NEWS 🚨
The first Nintendo Switch 2 ROMs are officially being dumped, starting with DELTARUNE (Ch. 1-4)!
A leak from the Underminers Discord reveals PC mouse controls are mapped to simulate both Joy-Cons in the Mike minigames.
The datamining scene is taking off! pic.twitter.com/BUdcrZGCrJ
— Project Lightning (@_ProjLightning_) October 24, 2026
Recent reports indicate that data extracted from Deltarune Chapters 1, 2, 3, and 4 granted access to internal role-playing game resources. Simultaneously, accounts like Centro Leaks shared assets from a purported beta version of The Duskbloods by FromSoftware. Furthermore, exploration of Mario Kart World files reportedly uncovered a novel three-dimensional model of Princess Peach. However, the absolute authenticity and complete scope of these extractions remain unverified.
NEW SWITCH 2 NEWS🚨
It's been confirmed that the first Nintendo Switch 2 ROMs are being dumped as we speak.
The image shows a datamine of the Duskbloods beta ROM.
Little by little, ladies and gentlemen, but it's finally begun.
Credits for the MK World Datamine pic.twitter.com/1RNRYLsY5J
— Project Lightning (@_ProjLightning_) October 24, 2026
Despite these breakthroughs, the current exploit does not grant access to the hardware encryption keys required to run software on external emulators. Additionally, ns2jb lacks critical kernel-level privileges, severely restricting system-level control and hindering the creation of comprehensive backup utilities.
Currently demonstrated on firmware version 23.0.1, the long-term viability of the exploit remains questionable as Nintendo prepares patches to neutralize the underlying flaw. Meanwhile, researchers are actively investigating alternative entry vectors, including potential WebKit vulnerabilities that could bypass the current reliance on SmileBASIC 4.
Nintendo Takes Defensive Measures
In response to the security breach, Nintendo has already taken defensive measures by delisting SmileBASIC 4 from the digital eShop, effectively blocking the primary distribution vector for the exploit. Concurrently, researcher Gezine—noted for prior PlayStation 5 exploits—reported receiving correspondence from Nintendo, though the exact contents and potential legal implications remain undisclosed.
As the situation unfolds, the broader gaming community watches closely to see how console security and homebrew capabilities evolve on the platform.
Filed in . Read more about Jailbreak, Mod and Nintendo Switch 2.