After thirteen years of maintaining the cleanest security record, the original Xbox One “fat” has finally been jailbroken as a hardware glitch was discovered in the boot ROM. The console is now fully compromised, with potential for full decryption of video games and other content. This comes in the backdrop of the Nintendo Switch and PlayStation 4’s relatively short-lived unbreakable lifespans, which makes the feat rather impressive for both the secure systems and gaming communities.
It’s worth noting that Microsoft significantly upped its security features with later One S, X, and Series consoles, and they remain fully unbreakable to date. That said, the 13-year record of the Xbox One is one for the history books. The hacker who pulled it off is Markus Gaasedelen, who took to the stage at RE//Verse 2026, a reverse engineering and vulnerable systems research conference, to announce the development.
What does the Xbox One jailbreak mean for the gaming community?
The most important detail outlined by Gaasedelen is its unpatchable nature: the researcher has found a hardware-level exploit in the boot ROM, which prevents Microsoft from delivering a software patch to block any hacks. The system is compromised before any Microsoft-signed firmware is loaded, causing it to mis-execute instructions (or, for better wording, execute the hacker’s desired instructions) right on time.
You will need three-to-four wires to tap the GPIO (General Purpose Input/Output) pins, efuse access, I2C diagnostics, and remove a capacitor to repeatedly glitch the voltage rail to perform the attack. The success rate is alarmingly low: just one in a million attempts. Breaking a single console can take days at this rate, hinting at the stringent security measures Microsoft baked into the machine.
This means every original 2013 Xbox One unit can now be reverse-engineered. Some possibilities include key extraction and full efuse dump, which are significant user information threats, to PC hijack and boot stage decryption (so far, Gaasedelen has announced SP1, SP2, 2BL, and firmware decryptions). In simple terms, the technical possibilities enable a full reverse engineering of the Xbox One OS. This is the biggest win for the security community.
Coming to decrypting games and apps, the preservation angle is particularly important. Xbox One was the first home video game console that pushed full online integration to the point where users hated it. Multiple titles are only available on digital stores with full DRM and require internet access to play. With a hackable platform, such games, DLC, patches, and even the system software can be permanently preserved in community-run archives.
Finally, Gaasedelen also highlighted the repairability perspective. Bricked Xboxes can be recovered, failing eMMC chips can be replaced, and the cryptographically tied hard disk drive can be decoupled for faster SSDs with the new hack. This is a huge win for users sticking to their old One consoles.
However, the hack is quite hard for casual modders to undertake. As it stands, perma-jailbroken Xbox Ones will certainly not become a common sight in gray markets.
Edited by Arka Mukherjee
