2026 Is Off to a Rough Start for Sony: PS5 BootROM Keys Have Leaked

2026 is starting badly for Sony. The PlayStation 5’s BootROM encryption keys have leaked online — and unlike the usual exploits Sony can patch with a system update, this vulnerability is baked directly into the hardware.

The reason is simple: those keys are physically fused into the processor of every PS5 already sold. That means the issue cannot be fixed with software. For the hacking community, this is a gold mine. For Sony, it’s a return to the dark days of the PS3.

Critical security keys are now public

It all started on December 31, 2025. Well-known figures in the console hacking scene such as @BrutalSam_ and @Shadzey1 posted the information on X. The posts were quickly removed for violating the platform’s rules — but it was already too late.

The BootROM keys and their associated “keyseeds” are now circulating on psdevwiki.com and in various specialized Discord servers.

These BootROM keys — sometimes referred to as “Level 0” keys — are the very first link in the PS5’s security chain. They are used to decrypt and verify the earliest stages of the console’s boot process.

Sony normally keeps these secrets extremely well protected, storing them inside the read-only memory of the PS5’s custom AMD processor. The problem is that this ROM is physically etched into the silicon at the factory. Sony cannot change it later with a firmware update.

Why this is a very big deal

Having access to the BootROM keys is like getting the master vault key instead of just learning how to pick the lock.

When you power on a PS5, the processor first executes the BootROM code, which verifies that the bootloader is legitimate and signed by Sony. That verification relies on the keys that have now leaked.

With those keys, hackers can decrypt and analyze Sony’s official bootloader in detail. They can understand exactly how the console boots, how it validates authorized code, and where potential weaknesses may exist. What used to be a black box becomes transparent.

That’s a major difference from previous PS5 jailbreaks, which targeted the kernel or the WebKit browser — software layers Sony could patch via updates. This time, the vulnerability sits at the lowest possible hardware level. Once keys are fused into silicon, there is no way to revoke or replace them.

Not an instant jailbreak — but a wide-open door

Leaking the keys doesn’t instantly turn every PS5 into a jailbroken console. Hackers still need an entry point, an exploit that allows unsigned code execution, and a full chain of vulnerabilities to gain the necessary privileges.

However, this leak dramatically accelerates that work. Security researchers expect more advanced custom firmware and backup loaders to appear sometime in 2026. Hackers now have full documentation of the boot process, allowing them to work far more efficiently.

Another major impact is emulation. Developers of PS5 emulators on PC — such as shadPS4 and Kyty — will benefit enormously from this information. Accurate emulation requires understanding how encrypted data and instructions are handled at the hardware level, and the BootROM keys provide exactly that insight.

Sony is stuck with 80 million vulnerable consoles

Sony is now facing a technical dead end.

The only way to invalidate the leaked keys would be to manufacture new AMD chips with different keys fused into the silicon. That would require a hardware revision — likely a quiet “PS5 v2” release in 2026.

But that does nothing for the more than 80 million PS5 units already sold. All of them will remain permanently vulnerable to exploits based on this leak.

This mirrors what happened with Nintendo’s Switch after the “Fusée Gelée” exploit and with the PS3 before it: pre-revision consoles become highly desirable among modders.

Ironically, that could make early PS5 models more valuable than newer ones — simply because they are hackable. The same phenomenon happened with the Switch, where unpatched models often sold for more on the second-hand market than brand-new units.

What Sony is likely to do next

Sony has not yet officially commented on the leak. But a few responses seem inevitable:

• Legal action against the original leakers
• Network bans for jailbroken consoles accessing PlayStation Network
• A future hardware revision with new security keys

None of that changes the reality that the genie is out of the bottle.

For Sony, this is one of the most serious security breaches in PlayStation history. For hackers, emulator developers, and digital preservationists, it marks the beginning of a new era for the PS5 — whether Sony likes it or not.