Over the last week, Switch 2 hackers have been using physical copies of Civilization 7 and its in-game chat to exploit a vulnerability that lets users input code and hack open Nintendo’s console. Things are so bad that Civ publisher 2K is reportedly starting to recall physical copies of the game to stop the exploit from spreading.
Civilization 7 launched in June 2025 and arrived on multiple platforms, including the original Switch. And that was that. But recently, the physical cart version of the original Switch port of the strategy game has become quite popular among Switch 2 hackers and homebrew modders. That’s because this version contains an unpatched exploit that lets users activate code via a connected USB device, like a phone, and break open the Switch 2 console for hacking and other shenanigans.
The Switch 2 hacking subreddit is currently filled with a lot of posts about Civilization 7 and using it to hack the console. You can find people sharing photos of new copies of the game they purchased online, asking questions about it, creating new ways to utilize the game and its exploit, and more. This all seems to trace back to an exploit called CivSwitch, created by hacker and modder Gezine.
To be clear, at the moment at least, this exploit can’t be used to play dumped Switch 2 games. Instead, this provides access to saves, opens up the ability to mod games, and lets users run homebrew apps and programs. But Switch 2 modding and hacking is moving fast right now, partially because of AI-assisted coding tools, so who knows what will happen in a few days and weeks.
Civilization 7 possibly recalled on Switch
Seemingly in response to the news that Switch copies of Civ7 contain a nasty code input exploit, 2K has reportedly begun recalling the physical version of the strategy game. A few users have claimed their orders were cancelled. At least one Redditor posted a translated message from Amazon that pinned the blame for a cancelled order on a mandate from 2K. Amazon said it was being recalled due to “technical and security-related requirements.”
Some are wondering if Nintendo has forced 2K to take this step. Kotaku has contacted 2K for more information.
Some are reporting that they have been offered the option to get a code-in-box version of the game, though this exploit doesn’t work with the digital version, so that’s not very helpful for hackers looking to break open their consoles.
Nintendo, along with every other major game publisher and console maker, is currently facing an escalating war against modders, pirates, and hackers as genAI coding tools like Claude have allowed people to quickly rip apart games, recreate code, and even port titles to other platforms in record time. It’s a game of whack-a-mole that isn’t likely to end anytime soon.