Switch 2 hackers have exploited a vulnerability in physical copies of Civilization 7 to gain unauthorized access to Nintendo's console. The exploit, called CivSwitch, was created by hacker and modder Gezine. It allows users to input code via a connected USB device like a phone to break open the Switch 2.
The original Switch version of Civ 7, which launched in June 2025, contains an unpatched exploit that hackers and homebrew modders have begun using widely. Posts on the Switch 2 hacking subreddit show users sharing photos of newly purchased copies, asking questions about the exploit, and creating new ways to utilize it. Currently, the exploit provides access to saves, enables game modding, and allows users to run homebrew apps and programs. It cannot yet be used to play dumped Switch 2 games.
In response, publisher 2K has reportedly begun recalling physical copies of Civilization 7. Some users reported their orders were cancelled. An Amazon customer received a translated message stating the recall was due to "technical and security-related requirements." Some customers have been offered code-in-box versions instead, though the digital version does not work with the exploit.
The hacking comes as console makers and game publishers face escalating challenges from modders and pirates using AI-assisted coding tools. Kotaku contacted 2K for comment.