Sony Awarded a Hacker $50,000 for Privately Reporting a PS5 Exploit He Found With AI — Now He’s Public Enemy Number One
A hacker known as “Jordy” has become a controversial figure in the PlayStation 5 homebrewing community after privately reporting a significant PS5 exploit to Sony and accepting a $50,000 bounty reward.
Using AI tools, Jordy identified the vulnerability, which would have allowed users to run Linux on PS5 consoles. Instead of keeping the exploit within the homebrew community, Jordy reported it through HackerOne, Sony’s official bug bounty program. According to Jordy, the decision was influenced by personal circumstances, including pressure from a family member’s terminal illness, and the fact that a third party had also discovered the same vulnerability.
The move has sparked significant backlash from community members. The original discoverer of the exploit had intended to keep it confidential until the launch of Grand Theft Auto 6, viewing it as a valuable asset for console modification enthusiasts. By reporting it to Sony, Jordy effectively neutralized the exploit before the community could fully explore its potential uses.
The incident highlights the fundamental tension between responsible security disclosure practices—which Sony’s bug bounty program represents—and the informal culture of the hacking community. Within the homebrew scene, keeping exploits private allows for extended periods of experimentation and use before developers patch the vulnerability. Jordy’s choice to accept the official bounty over community norms has made him a polarizing figure among those who view the decision as a betrayal of unwritten community standards.