The catch? It required a “stepping stone”—an entry point from a vulnerable game or system applet. The most famous of these: (a hacked save for Super Smash Bros. Ultimate ) and later Puyo Puyo Tetris .
By summer 2018, new Switches shipped with a patched boot ROM. The model arrived in August 2019, boasting a new Tegra X1+ chip (16nm vs 20nm), better battery life—and a locked bootrom. No software exploit. No Fusée Gelée. The scene called it “the unhackable Switch.”
For nearly a year, v2 owners could only watch as Erista users enjoyed custom firmware (Atmosphère), emulators, and mods. The only way to hack a Mariko was a (SX Core / HWFLY)—a micro-soldering nightmare requiring precision, heat guns, and risking a dead console. Softmod dreams seemed dead. The Turning Point: CVE-2020-10181 (April 2020) Then came a whisper. Security researcher Katherine Temkin (who co-discovered Fusée Gelée) and the ReSwitched team revealed a new attack: CVE-2020-10181 , also known as the “Mariko software vulnerability.” It wasn’t a bootrom flaw—Nintendo fixed that permanently. Instead, it exploited a weakness in TrustZone , a secure hardware enclave, via a maliciously crafted save file or game update.
Here is the story of the —a journey from “unhackable” to a quiet, persistent victory. The "Patched" Wall (Early 2018–Mid 2019) When the Nintendo Switch launched in 2017, a hardware flaw in the original model (Erista) made softmodding trivial: a paperclip or jig in the right Joy-Con rail could trigger RCM (Recovery Mode) and inject a payload. But Nintendo learned fast.
RussianThe catch? It required a “stepping stone”—an entry point from a vulnerable game or system applet. The most famous of these: (a hacked save for Super Smash Bros. Ultimate ) and later Puyo Puyo Tetris .
By summer 2018, new Switches shipped with a patched boot ROM. The model arrived in August 2019, boasting a new Tegra X1+ chip (16nm vs 20nm), better battery life—and a locked bootrom. No software exploit. No Fusée Gelée. The scene called it “the unhackable Switch.” switch v2 softmod
For nearly a year, v2 owners could only watch as Erista users enjoyed custom firmware (Atmosphère), emulators, and mods. The only way to hack a Mariko was a (SX Core / HWFLY)—a micro-soldering nightmare requiring precision, heat guns, and risking a dead console. Softmod dreams seemed dead. The Turning Point: CVE-2020-10181 (April 2020) Then came a whisper. Security researcher Katherine Temkin (who co-discovered Fusée Gelée) and the ReSwitched team revealed a new attack: CVE-2020-10181 , also known as the “Mariko software vulnerability.” It wasn’t a bootrom flaw—Nintendo fixed that permanently. Instead, it exploited a weakness in TrustZone , a secure hardware enclave, via a maliciously crafted save file or game update. The catch
Here is the story of the —a journey from “unhackable” to a quiet, persistent victory. The "Patched" Wall (Early 2018–Mid 2019) When the Nintendo Switch launched in 2017, a hardware flaw in the original model (Erista) made softmodding trivial: a paperclip or jig in the right Joy-Con rail could trigger RCM (Recovery Mode) and inject a payload. But Nintendo learned fast. Ultimate ) and later Puyo Puyo Tetris
