Nintendo DMCA removes 144 GitHub repos hosting open-source Switch modchip firmware

Nintendo of America filed a DMCA request that resulted in GitHub removing 144 repositories containing open-source firmware for Nintendo Switch hardware modchips. The targeted firmware powers devices including SX Core, SX Lite, Picofly, and HWFLY, which enable voltage glitching attacks during boot to bypass the Switch's secure boot sequence on patched consoles. Nintendo's filing argues the repositories are primarily designed to unlawfully circumvent technological protection measures controlling access to copyrighted works, and cited the U.S. Department of Justice's criminal prosecution of Team-Xecuter as supporting precedent.

The takedown does not affect already-installed modchips or existing hardware in the wild, but it blocks firmware updates, flashing, and reflashing for current users while preventing new adopters from obtaining the necessary open-source code. The modchip ecosystem supports homebrew development, custom operating systems, emulation, game modding, and overclocking in addition to its more controversial uses.

Modchip firmware architecture and DMCA scope

• Voltage glitching during boot: The firmware performs precise voltage manipulation during the Switch's boot sequence to bypass the console's technological protection measures and gain execution control.
• Repository network structure: GitHub removed 144 total repositories including a parent repository, indicating a coordinated multi-repo distribution model for the firmware rather than a single codebase.
• Targeted hardware platforms: The takedown specifically names firmware for SX Core, SX Lite, Picofly, and HWFLY modchips, which require soldering to the Switch motherboard on patched units.
• Hardware exploit limitations: The underlying recovery mode exploit is unpatchable only on early original Switch consoles; later Switch Lite, Switch OLED, and Switch 2 units are not vulnerable to this modchip approach.
• Legal argumentation: Nintendo's DMCA filing explicitly frames distribution as 'unlawful trafficking' under anti-circumvention provisions, leveraging the criminal conviction of Team-Xecuter members to strengthen civil enforcement.

Why it matters

This takedown demonstrates how DMCA anti-circumvention provisions can be weaponized against open-source firmware projects even when the code enables legitimate homebrew and alternative OS development. For the open hardware and console hacking communities, the loss of centralized GitHub repositories disrupts collaborative firmware maintenance and creates legal chilling effects for developers working on similar embedded security research, while reinforcing the fragility of platform-dependent open-source distribution.