TheFlow may stop PS5 hacking after AI dispute over hypervisor bug

• The trigger appears to be a dispute over a PS5 hypervisor bug that another user says was reported to Sony via HackerOne.
• The argument also involves claims that the bug was found or confirmed with AI help a few hours later.

What happened

Andy Nguyen, known as TheFlow, posted on September 16, 2026, that he is stepping away from the PS5 scene and stopping all of his work on PS5 Linux. In the same post, he mentioned plans to finish PS5 Pro support and release it in 2027, but said that is now off the table. Kotaku links that post to a broader dispute over a PS5 hypervisor bug and describes TheFlow as a prominent PlayStation hacker who has previously spoken publicly about his work on Sony hardware.

The immediate trigger appears to be a discussion about a hypervisor bug on the PS5. According to a post by Jordy, who is active online as @couldbeautism, he reported the bug through HackerOne after TheFlow asked for it not to be reported yet. Jordy says he respected that request, but that someone else found the bug a few hours later with AI help, after which he submitted the report anyway. The available posts do not explain in technical detail what the hypervisor bug does, and there is no independent confirmation of the full reporting chain.

Kotaku connects that discussion to TheFlow’s possible exit from the PS5 hacking scene. The outlet also notes that TheFlow previously showed a PS5 running Linux, including a demo of GTA 5 Enhanced with ray tracing. Kotaku described that project as an attempt to turn the console into something like a Steam Machine. A March 6, 2026 post supports that picture: in it, TheFlow says he ported Linux to the PS5 and turned the console into a Steam Machine while running GTA 5 Enhanced with ray tracing.

The available sources do show that the dispute is centered on a specific moment in September 2026, but not whether TheFlow’s departure is final. It also remains unclear whether AI actually discovered the bug, or only helped confirm an already suspected issue before the report was filed with HackerOne.

Background

TheFlow, or Andy Nguyen, has long been considered a major name in PlayStation hacking and modding. In the available sources, this case revolves around a PS5 hypervisor exploit, but the technical details of the bug are not spelled out in the shared posts. The sources do say it involves the hypervisor, which in console security usually points to a very sensitive layer of the software stack, but no further technical specifics are provided.

Kotaku says the Linux project was meant for newer PS5 models and more recent firmware, including the PS5 Pro. That detail is not technically backed up further in the source, but it places the dispute in the context of an ongoing PS5 Linux development effort. The March 6, 2026 tweet shows that TheFlow had already shared a working demo by then, with Linux on PS5 and a graphical demo of GTA 5 Enhanced with ray tracing. That makes it clear the project had moved beyond a simple proof of concept at that point.

The social posts from September 16, 2026 show that the argument was not only about the bug itself, but also about disclosure timing. Jordy’s explanation explicitly names HackerOne as the reporting channel and refers to an earlier request not to report the bug yet. The available information does not say who first found the issue technically, who used AI, or what role Sony played in handling it. As a result, it remains unclear whether the core of the conflict was timing, credit, or the way the vulnerability was disclosed.

Kotaku’s framing suggests that TheFlow’s reaction stems from frustration over how the bug was shared. At the same time, the sources do not include a direct interview or formal statement in which TheFlow fully explains the reason himself. So the available information supports that a public break has formed around a PS5 hypervisor bug, but not that every detail of the report or the AI angle is settled.

Sources

• Kotaku: "Popular PlayStation Hacker Calling It Quits Due To AI-Using ‘Slop Kiddies’ Reporting Important Bug To Sony"
• X/Twitter: @theflow0, post from March 6, 2026
• X/Twitter: @couldbeautism, post from September 16, 2026