PlayStation 2's MechaCon security chip finally dumped after 26 years

A reverse engineer has decapped and dumped the PS2's MechaCon chip after four years of work, opening doors for hardware preservation and modding.

AI-drafted from 5 sources. This story was written with AI from the outside reporting listed under Sources, and checked by automated tools before it went up. The originals have the full detail.

One of the PlayStation 2's last hardware secrets is out. A reverse engineer working under the name DiscoStarslayer has cracked the console's MechaCon security chip, the part that has resisted full analysis since the machine launched in 1999. The work took four years and, according to Tom's Hardware, involved chemically decapping the chip to expose its die and then optically dumping the circuitry under a microscope.

The chip in question is the Sony CXP102064, better known by its nickname MechaCon. It sat inside the original “PS2 Fat” and, as the PSDev Wiki notes in the Tom's Hardware piece, handled MagicGate memory card decryption and KELF (encrypted executable) decryption among other jobs. It also controlled the console's optical and flash drive mechanics, which is why hobbyists have wanted inside it for years: understanding MechaCon is a precondition for building a proper replacement optical drive for ageing PS2 hardware.

Why this took four years

Getting at the chip's logic meant physically destroying one to read it. DiscoStarslayer decapped the CXP102064, exposing the silicon, then used optical dumping and microscope analysis to map the circuitry, according to both TweakTown and TechSpot. That gave a “dirty” optical dump rather than working firmware. The breakthrough, per TechSpot, came when a collaborator named Libby found a software exploit that let the team extract usable data from those dumps. DiscoStarslayer's own summary, posted to social media on 13 September, credits Libby directly: “Thank you Libby for finding the exploit from our dirty optical dumps!” TechSpot reports the pair are now working to extend that exploit to later chip revisions, and that DiscoStarslayer called the whole effort his “personal Moby Dick project”, adding “there is always something else”.

What it actually changes

Here the sources disagree a little on emphasis. TweakTown and Tom's Hardware both frame the dump as a boost for emulation and homebrew broadly. TechSpot is more sceptical on the emulation front specifically, pointing out that PCSX2 already treats PS2 emulation as a largely solved problem, with more than 98 percent of games rated playable according to the emulator's own compatibility data. Software emulation, in other words, doesn't strictly need MechaCon's secrets, because PCSX2 has spent two decades working around them rather than through them. Where the dump is expected to matter more is hardware: repair, modding original consoles, and potentially building a genuine replacement for the optical drive mechanism MechaCon was built to police. It should also help document the console properly for preservation, since DiscoStarslayer is currently sharing metadata and firmware hashes for the dumps obtained so far, with a fuller write-up promised later.

The arcade wrinkle

MechaCon's reach went beyond home consoles. Tom's Hardware notes that social media commenters flagged the same chip's firmware in Namco's System 246 and System 256 arcade boards, and in Konami's Python 1, both of which were built on modified PS2 hardware and used MechaCon to authenticate encrypted game data. TweakTown suggests this could eventually mean more accurate, higher-performance emulation for those arcade systems too, though nobody has yet demonstrated that in practice.

What isn't yet clear is how far this scales. The exploit was found on one specific revision of the CXP102064, and extending it to every hardware revision Sony shipped across the PS2's life is still ongoing work. A full technical write-up hasn't landed yet, so the finer detail of what the dump actually contains, and what it will let developers build, remains unconfirmed.

Sources

• Original Sony PlayStation 2 security chip 'broken wide open' after 26 years (Tom's Hardware)
• Discussion: Original Sony PlayStation 2 security chip 'broken wide open' after 26 years (Hacker News)
• After 26 years, Sony's PlayStation 2 security chip has finally been cracked (TweakTown)
• Someone finally cracked the PlayStation 2's security chip, 26 years later (TechSpot)
• One of PlayStation 2’s last hardware secrets has been cracked (News search)

Image: Tom's Hardware