Thanks to a major leak, custom firmware could soon be installed on Sony’s console released more than five years ago.

Since the release of the PlayStation 5, console hackers have continuously attempted to gain full access to the system by discovering vulnerabilities and exploiting software flaws. These exploits allow access to features that are normally unavailable to consumers. On New Year’s Eve, however, the hacking community made a major breakthrough that could have far-reaching consequences for the PlayStation 5 hacking scene.

At the end of 2025, discussions intensified among PlayStation 5 hackers after a massive data dump appeared on psdevwiki.com and private Discord servers. The leaked data contained the system’s Level 0 BootROM keys.

The BootROM is the very first code executed when the PlayStation 5 powers on and represents the deepest layer of the console’s security architecture. It is responsible for decoding and verifying the earliest stages of the boot chain. The keys are stored on a read-only chip and decoded by the system’s APU at startup. Gaining access to them essentially grants full ownership of the system.

Any exploit built on these keys would far surpass existing software-based exploits, as BootROM code and keys cannot be altered through firmware updates. While Sony will likely introduce hardware changes in future retail units (CFI-3000 series), the more than 60 million consoles already in consumers’ homes could effectively remain permanently unlocked.

This leak carries significant implications. While end users themselves may not be able to directly utilize the leaked ROM keys, the ability to decode the bootloader dramatically accelerates the development of custom firmware. This would allow systems to boot permanently into modified operating systems without requiring repeated exploits or being patched by firmware updates.

The leaked keys could also greatly benefit the emulation scene by providing emulator developers with critical information to improve accuracy and compatibility. The PlayStation 5 could become an emulation powerhouse, capable of running titles from other systems and even PlayStation 3 games through the RPCS3 emulator.

However, such developments may also open the door to piracy, as custom firmware could allow pirated games to run on the system.

Source: WCCFTech, The Cybersec Guru