3DS:History of 3DS Hacking - Revision history

Octeble: Fixed minor inaccuracies around a9lh installation, browserhax, and gateway firmware versions

2026-03-05T09:24:50Z

Fixed minor inaccuracies around a9lh installation, browserhax, and gateway firmware versions

Piplupness: /* March */ Removing rom website, also this is not the official Citra source and PabloMK7 does discourage it on official Azahar sources.

2025-08-01T21:35:01Z

March: Removing rom website, also this is not the official Citra source and PabloMK7 does discourage it on official Azahar sources.

← Older revision		Revision as of 21:35, 1 August 2025
Line 36:		Line 36:

	=== March ===		=== March ===
	The first commit of ~~[https://citra-emulator.com/~~ Citra], the first major 3DS emulator, is released.		The first commit of Citra, the first major 3DS emulator, is released.

	=== August ===		=== August ===

ItsCrocoSwine: revert it's to its

2025-07-26T21:46:32Z

revert it's to its

← Older revision		Revision as of 21:46, 26 July 2025
Line 33:		Line 33:

	=== January ===		=== January ===
	brickgate/brickway - A scandal where Gateway released a FIRM that intentionally bricks consoles using Gateway3DS flashcart clones (such as R4 and Orange3DS). On top of this, ~~it's~~ code was written badly enough that it triggered on many legitimate Gateway3DS cartridges, bricking completely 'innocent' users in the crossfire.		brickgate/brickway - A scandal where Gateway released a FIRM that intentionally bricks consoles using Gateway3DS flashcart clones (such as R4 and Orange3DS). On top of this, its code was written badly enough that it triggered on many legitimate Gateway3DS cartridges, bricking completely 'innocent' users in the crossfire.

	=== March ===		=== March ===
Line 57:		Line 57:

	=== May ===		=== May ===
	The custom firmware PastaCFW is first released. It is named after a leak of sigpatches on pastebin, which was combined with patois' Brahma (an open source memchunkhax/firmlaunchhax) to make the first open source custom firmware. ~~It's~~ only major caveat was that it had no emuNAND support.		The custom firmware PastaCFW is first released. It is named after a leak of sigpatches on pastebin, which was combined with patois' Brahma (an open source memchunkhax/firmlaunchhax) to make the first open source custom firmware. its only major caveat was that it had no emuNAND support.

	A fork of rxTools with PastaCFW's sigpatches is released by ahp_person (appletinivi), causing roxas75 to openly dispute him in an attempt to stop piracy from becoming a legal issue for the wider homebrew community.		A fork of rxTools with PastaCFW's sigpatches is released by ahp_person (appletinivi), causing roxas75 to openly dispute him in an attempt to stop piracy from becoming a legal issue for the wider homebrew community.
Line 80:		Line 80:

	=== December ===		=== December ===
	An upgrade to Sky3DS, Sky3DS+, is released. Among others, ~~it's~~ new features included bypassing cart-based AP in recent games and having a second button for more ease of selecting games.		An upgrade to Sky3DS, Sky3DS+, is released. Among others, its new features included bypassing cart-based AP in recent games and having a second button for more ease of selecting games.

	The CCC hosts [https://gbatemp.net/threads/32c3-console-hacking-3ds-talk-dec-27-smea-derrek-plutoo.405640/ 32c3] in Hamburg, Germany. During 32c3, [https://smealum.github.io/3ds/32c3/ smealum gives a talk] where snshax, [[arm9loaderhax]], memchunkhax2, and ntrcardhax are revealed, & menuhax and ironhax receive updates to continue functioning.		The CCC hosts [https://gbatemp.net/threads/32c3-console-hacking-3ds-talk-dec-27-smea-derrek-plutoo.405640/ 32c3] in Hamburg, Germany. During 32c3, [https://smealum.github.io/3ds/32c3/ smealum gives a talk] where snshax, [[arm9loaderhax]], memchunkhax2, and ntrcardhax are revealed, & menuhax and ironhax receive updates to continue functioning.
Line 100:		Line 100:
	The primary userland exploit ctr-httpwn is first released by yellows8.		The primary userland exploit ctr-httpwn is first released by yellows8.

	A complex dispute between the original author of ReiNand (Reisyukaku) and the rest of ~~it's~~ developer team hits ~~it's~~ first overt boiling point, causing them to cut ties as much as possible and officially fork the project into AuReiNand.		A complex dispute between the original author of ReiNand (Reisyukaku) and the rest of its developer team hits its first overt boiling point, causing them to cut ties as much as possible and officially fork the project into AuReiNand.

	=== March ===		=== March ===
Line 182:		Line 182:

	=== December ===		=== December ===
	The CCC hosts [https://gbatemp.net/threads/36c3-hacker-conference-underway-27th-to-30th-of-december-2019.555023/ 36c3] in Leipzig, Germany. During 36c3, [https://mrnbayoh.github.io/36c3/ MrNbaYoh gives a talk] that demonstrates a new primary exploit chain: using StreetPass tags, someone could remotely takeover a 3DS in userland and install custom firmware, with zero user interaction required. This would set up further exploits developed by TuxSH and Lazypixie which would take over the ARM11 kernel, and later on Safehax 2.x to also take over ARM9. However, due to ~~it's~~ potential for malicious use (i.e. remotely bricking consoles), this exploit chain was submitted to HackerOne sometime earlier and patched in version 11.12, two months before 36c3 started.		The CCC hosts [https://gbatemp.net/threads/36c3-hacker-conference-underway-27th-to-30th-of-december-2019.555023/ 36c3] in Leipzig, Germany. During 36c3, [https://mrnbayoh.github.io/36c3/ MrNbaYoh gives a talk] that demonstrates a new primary exploit chain: using StreetPass tags, someone could remotely takeover a 3DS in userland and install custom firmware, with zero user interaction required. This would set up further exploits developed by TuxSH and Lazypixie which would take over the ARM11 kernel, and later on Safehax 2.x to also take over ARM9. However, due to its potential for malicious use (i.e. remotely bricking consoles), this exploit chain was submitted to HackerOne sometime earlier and patched in version 11.12, two months before 36c3 started.

	== 2020 ==		== 2020 ==

Kuhprii: redundancy, punctuation and clarification

2025-07-26T18:19:25Z

redundancy, punctuation and clarification

← Older revision		Revision as of 18:19, 26 July 2025
Line 20:		Line 20:

	=== March ===		=== March ===
	The first (?) homebrew app is written in .cxi format, "Hello World"~~, is written~~ by Xcution (author of CiTRUS, a tool that allows BaNneR and ICoN files to be made using the .xbsf format)		The first (?) homebrew app is written in .cxi format, that being "Hello World" by Xcution (author of CiTRUS, a tool that allows BaNneR and ICoN files to be made using the .xbsf format)

	== 2013 ==		== 2013 ==
Line 33:		Line 33:

	=== January ===		=== January ===
	brickgate/brickway - A scandal where Gateway released a FIRM that intentionally bricks consoles using Gateway3DS flashcart clones (such as R4 and Orange3DS). On top of this, ~~its~~ code was written badly enough that it triggered on many legitimate Gateway3DS cartridges, bricking completely 'innocent' users in the crossfire.		brickgate/brickway - A scandal where Gateway released a FIRM that intentionally bricks consoles using Gateway3DS flashcart clones (such as R4 and Orange3DS). On top of this, it's code was written badly enough that it triggered on many legitimate Gateway3DS cartridges, bricking completely 'innocent' users in the crossfire.

	=== March ===		=== March ===
Line 42:		Line 42:

	=== November ===		=== November ===
	[https://www.gamebrew.org/wiki/Palantine_CFW_3DS Palantine] (a CFW made by Yellows8 and other) is leaked, bringing a closed-source custom firmware to the public. However, it had limitations such as the ~~EmuNAND~~ not being ~~updateable~~, having a low boot rate, and being difficult to install, among others. The thing it did best, running CIAs, would be taken and added to Gateway3DS shortly after.		[https://www.gamebrew.org/wiki/Palantine_CFW_3DS Palantine] (a CFW made by Yellows8 and other) is leaked, bringing a closed-source custom firmware to the public. However, it had limitations such as the emuNAND not being update-able, having a low boot rate, and being difficult to install, among others. The thing it did best, running CIAs, would be taken and added to Gateway3DS shortly after.

	The flashcart [[Sky3DS]] is first released. It could play pirated roms on entirely stock consoles, but couldn't run homebrew and had a very high ban risk due to the way it worked. This ban risk was unfixable until full custom firmware was released, and by that point it became obsolete anyway.		The flashcart [[Sky3DS]] is first released. It could play pirated roms on entirely stock consoles, but couldn't run homebrew and had a very high ban risk due to the way it worked. This ban risk was unfixable until full custom firmware was released, and by that point it became obsolete anyway.
Line 57:		Line 57:

	=== May ===		=== May ===
	The custom firmware PastaCFW is first released. It is named after a leak of sigpatches on pastebin, which was combined with patois' Brahma (an open source memchunkhax/firmlaunchhax) to make the first open source custom firmware. ~~Its~~ only major caveat was that it had no emuNAND support.		The custom firmware PastaCFW is first released. It is named after a leak of sigpatches on pastebin, which was combined with patois' Brahma (an open source memchunkhax/firmlaunchhax) to make the first open source custom firmware. It's only major caveat was that it had no emuNAND support.

	A fork of rxTools with PastaCFW's sigpatches is released by ahp_person (appletinivi), causing roxas75 to openly dispute him in an attempt to stop piracy from becoming a legal issue for the wider homebrew community.		A fork of rxTools with PastaCFW's sigpatches is released by ahp_person (appletinivi), causing roxas75 to openly dispute him in an attempt to stop piracy from becoming a legal issue for the wider homebrew community.
Line 80:		Line 80:

	=== December ===		=== December ===
	An upgrade to Sky3DS, Sky3DS+, is released. Among others, ~~its~~ new features included bypassing cart-based AP in recent games and having a second button for more ease of selecting games.		An upgrade to Sky3DS, Sky3DS+, is released. Among others, it's new features included bypassing cart-based AP in recent games and having a second button for more ease of selecting games.

	The CCC hosts [https://gbatemp.net/threads/32c3-console-hacking-3ds-talk-dec-27-smea-derrek-plutoo.405640/ 32c3] in Hamburg, Germany. During 32c3, [https://smealum.github.io/3ds/32c3/ smealum gives a talk] where snshax, [[arm9loaderhax]], memchunkhax2, and ntrcardhax are revealed, & menuhax and ironhax receive updates to continue functioning.		The CCC hosts [https://gbatemp.net/threads/32c3-console-hacking-3ds-talk-dec-27-smea-derrek-plutoo.405640/ 32c3] in Hamburg, Germany. During 32c3, [https://smealum.github.io/3ds/32c3/ smealum gives a talk] where snshax, [[arm9loaderhax]], memchunkhax2, and ntrcardhax are revealed, & menuhax and ironhax receive updates to continue functioning.
Line 100:		Line 100:
	The primary userland exploit ctr-httpwn is first released by yellows8.		The primary userland exploit ctr-httpwn is first released by yellows8.

	A complex dispute between the original author of ReiNand (Reisyukaku) and the rest of ~~its~~ developer team hits ~~its~~ first overt boiling point, causing them to cut ties as much as possible and officially fork the project into AuReiNand.		A complex dispute between the original author of ReiNand (Reisyukaku) and the rest of it's developer team hits it's first overt boiling point, causing them to cut ties as much as possible and officially fork the project into AuReiNand.

	=== March ===		=== March ===
Line 182:		Line 182:

	=== December ===		=== December ===
	The CCC hosts [https://gbatemp.net/threads/36c3-hacker-conference-underway-27th-to-30th-of-december-2019.555023/ 36c3] in Leipzig, Germany. During 36c3, [https://mrnbayoh.github.io/36c3/ MrNbaYoh gives a talk] that demonstrates a new primary exploit chain: using StreetPass tags, someone could remotely takeover a 3DS in userland and install custom firmware, with zero user interaction required. This would set up further exploits developed by TuxSH and Lazypixie which would take over the ARM11 kernel, and later on Safehax 2.x to also take over ARM9. However, due to ~~its~~ potential for malicious use (i.e. remotely bricking consoles), this exploit chain was submitted to HackerOne sometime earlier and patched in version 11.12, two months before 36c3 started.		The CCC hosts [https://gbatemp.net/threads/36c3-hacker-conference-underway-27th-to-30th-of-december-2019.555023/ 36c3] in Leipzig, Germany. During 36c3, [https://mrnbayoh.github.io/36c3/ MrNbaYoh gives a talk] that demonstrates a new primary exploit chain: using StreetPass tags, someone could remotely takeover a 3DS in userland and install custom firmware, with zero user interaction required. This would set up further exploits developed by TuxSH and Lazypixie which would take over the ARM11 kernel, and later on Safehax 2.x to also take over ARM9. However, due to it's potential for malicious use (i.e. remotely bricking consoles), this exploit chain was submitted to HackerOne sometime earlier and patched in version 11.12, two months before 36c3 started.

	== 2020 ==		== 2020 ==
Line 231:		Line 231:
	Nintendo releases version 11.16, breaking TuxSH's universal-otherapp combo by patching smpwn.		Nintendo releases version 11.16, breaking TuxSH's universal-otherapp combo by patching smpwn.

	Nintendo also lays the foundation for the eShop closure by updating MINT/ESHOP to handle shutting down eShop payments. Just two weeks later, they would update the NVER on this title due to a typo in the web data module.		Nintendo also lays the foundation for the eShop closure by updating MINT/ESHOP to handle shutting down eShop payments. Just two weeks later, they would update the NVER (most likely meaning Network Version) on this title due to a typo in the web data module.

	=== December ===		=== December ===

Tophatted: only SALT is a team, roxas75 and patois are both individuals

2025-07-09T03:20:03Z

only SALT is a team, roxas75 and patois are both individuals

← Older revision		Revision as of 03:20, 9 July 2025
Line 51:		Line 51:

	=== January ===		=== January ===
	Gateway cracks firmware version 9.2 and updates their flashcarts to OMEGA. The user yifanlu makes a blog post about reverse engineering the memchunkhax/firmlaunchhax combo used by Gateway, and ~~teams such~~ SALT~~, roxas75, and patois~~ implement their own versions of it shortly after.		Gateway cracks firmware version 9.2 and updates their flashcarts to OMEGA. The user yifanlu makes a blog post about reverse engineering the memchunkhax/firmlaunchhax combo used by Gateway; roxas75, patois, and team SALT all implement their own versions of it shortly after.

	=== February ===		=== February ===

Aspect X: /* November */ added space (typo)

2025-06-05T20:35:04Z

November: added space (typo)

← Older revision		Revision as of 20:35, 5 June 2025
Line 46:		Line 46:
	The flashcart [[Sky3DS]] is first released. It could play pirated roms on entirely stock consoles, but couldn't run homebrew and had a very high ban risk due to the way it worked. This ban risk was unfixable until full custom firmware was released, and by that point it became obsolete anyway.		The flashcart [[Sky3DS]] is first released. It could play pirated roms on entirely stock consoles, but couldn't run homebrew and had a very high ban risk due to the way it worked. This ban risk was unfixable until full custom firmware was released, and by that point it became obsolete anyway.

	The primary userland exploit{{GitHub\|smealum/ninjhax\|ninjhax}} is first released by smealum.		The primary userland exploit {{GitHub\|smealum/ninjhax\|ninjhax}} is first released by smealum.

	== 2015 ==		== 2015 ==

StarlitSkies: remove approver magic word and shift zoogie credits to bottom of page

2025-03-29T01:03:16Z

remove approver magic word and shift zoogie credits to bottom of page

← Older revision		Revision as of 01:03, 29 March 2025
Line 1:		Line 1:
	~~{{#approvable_by: users = Wariohax}}<!-- remove this when the page is moved to 3DS namespace -->~~		<references />
	<references />~~Heavy adaption of zoogie's "A Pretty Brief History of the 3ds Hacking/Homebrew Scene" from the "3DS hacking scene history" section on GBAtemp.~~
	== 2011 ==		== 2011 ==

Line 258:		Line 257:
	Zoogie(?) calls it quits and is looking forward to future challenges whilst appreciating the time "he had helping people unlock their 3DSs!" -zoogie		Zoogie(?) calls it quits and is looking forward to future challenges whilst appreciating the time "he had helping people unlock their 3DSs!" -zoogie
	<references />		<references />

			(Credit to zoogie for writing "A Pretty Brief History of the 3ds Hacking/Homebrew Scene", the GBAtemp page that this page was heavily adapted from.)

Kuhprii: removed credits

2025-03-29T00:55:45Z

removed credits

← Older revision		Revision as of 00:55, 29 March 2025
Line 257:		Line 257:
	=== December ===		=== December ===
	Zoogie(?) calls it quits and is looking forward to future challenges whilst appreciating the time "he had helping people unlock their 3DSs!" -zoogie		Zoogie(?) calls it quits and is looking forward to future challenges whilst appreciating the time "he had helping people unlock their 3DSs!" -zoogie
	<references />~~Credits:~~		<references />

	[[User:Wariohax\|<span style="color:yellow;font-weight:bold">Wario</span><span style="color:purple;font-weight:bold">hax</span>]] ([[User talk:Wariohax\|talk]]) Original page creator, was created in my (Wariohax) user page, then was moved after been revised,

	~~zoogie [https://github.com/zoogie] , he made the page that I used for almost the entirety of this wiki page,~~

	~~add starlit, fox and ajl signature somewhere:)~~

Kuhprii at 00:20, 26 March 2025

2025-03-26T00:20:44Z

← Older revision		Revision as of 00:20, 26 March 2025
Line 259:		Line 259:
	<references />Credits:		<references />Credits:

	<~~nowiki~~>~~~~~~~ Original page creator, was created in my (Wariohax) user page, then was moved after been revised,~~</nowiki>~~		[[User:Wariohax\|<span style="color:yellow;font-weight:bold">Wario</span><span style="color:purple;font-weight:bold">hax</span>]] ([[User talk:Wariohax\|talk]]) Original page creator, was created in my (Wariohax) user page, then was moved after been revised,

	zoogie [https://github.com/zoogie] , he made the page that I used for almost the entirety of this wiki page,		zoogie [https://github.com/zoogie] , he made the page that I used for almost the entirety of this wiki page,

	add starlit, fox and ajl signature somewhere:)		add starlit, fox and ajl signature somewhere:)

Kuhprii: credits

2025-03-26T00:12:03Z

credits

← Older revision		Revision as of 00:12, 26 March 2025
Line 257:		Line 257:
	=== December ===		=== December ===
	Zoogie(?) calls it quits and is looking forward to future challenges whilst appreciating the time "he had helping people unlock their 3DSs!" -zoogie		Zoogie(?) calls it quits and is looking forward to future challenges whilst appreciating the time "he had helping people unlock their 3DSs!" -zoogie
			<references />Credits:

			<nowiki>~~~ Original page creator, was created in my (Wariohax) user page, then was moved after been revised,</nowiki>

			zoogie [https://github.com/zoogie] , he made the page that I used for almost the entirety of this wiki page,

			add starlit, fox and ajl signature somewhere:)