One of the PS2's last locks has been picked

Four years of work. On 13 September 2026 the Canadian modder DiscoStarslayer made an announcement on X: the inside of the PS2's MechaCon (mechanical controller) chip had been read. MechaCon is the security chip that runs the console's optical drive. It also handles the MagicGate memory card encryption and the encrypted programs known as KELF. Its firmware sits in mask ROM, so an ordinary programmer couldn't read it.

It was a long road. First the chips were opened up with chemicals (decap). Then the ROM was read optically from photographs of the die, but those dumps came out full of errors. A researcher called Libby found an exploit in those flawed dumps, and the job turned into extracting it through software. The technical details of the exploit haven't been published yet.

The GitHub repository shared on 16 September lists the CXP101064, CXP102064 and CXP103049 series. Covered are the early fat models from SCPH-10000 to SCPH-39010, the DTL developer kits, and the Namco System 246/256 and Konami Python 1 arcade boards. The slim models are left out. The repository holds only the SHA-256 checksums of about 40 dumps. The files themselves aren't there.

This isn't an ODE (optical drive emulator), and it isn't a hack you'll pull off at home either. Then again, it opens a solid door for emulation research and for repairing broken consoles. Not bad at all for a twenty-six-year-old box.