The easiest Nintendo Switch to modify without soldering is an original HAC-001 Switch, commonly called the V1 or Erista model, with an unpatched serial number. Not every V1 is vulnerable. The revised HAC-001(-01) Switch V2, Switch Lite, and Switch OLED are patched against the original no-solder exploit and normally require an internal modchip for custom firmware.
The quick answer: which Switch should you buy?
| Switch family | Nintendo model number | No-solder Fusée Gelée route? | Practical status |
|---|---|---|---|
| Original Switch V1 | HAC-001 |
Some units yes | Check the full serial number and test doubtful units. |
| Revised Switch V2 | HAC-001(-01) |
No | Normally requires a modchip for current custom firmware. |
| Switch Lite | HDH-001 |
No | Requires a Lite-compatible modchip for the normal current route. |
| Switch OLED | HEG-001 |
No | Requires an OLED-compatible modchip; installation is a difficult hardware project. |
| Nintendo Switch 2 | BEE-001 |
Separate subject | Do not use Switch 1 serial lists or exploit assumptions. |
Nintendo’s official model identifiers are listed on its serial-number support page. Community technical documentation classifies the revised Switch, Lite, and OLED hardware as patched against the original RCM exploit; see the ConsoleMods custom-firmware guide and NH Switch hardware documentation.
As an Amazon Associate I earn from qualifying purchases.
What does “hackable” mean here?
“Hackable” is not a useful yes-or-no label unless the route is specified. In this article, the most important distinction is whether a Switch can run homebrew without opening the console or soldering a modchip.
- Unpatched
- The console can accept and execute a Fusée Gelée payload through Recovery Mode, or RCM. This is the desirable no-solder category for an original Switch.
- Possibly patched
- The serial falls in a community-defined transition range where the serial alone cannot provide a reliable answer. The console must be physically tested.
- Patched
- The original Fusée Gelée RCM payload route is blocked by the console’s hardware revision. The console may still enter RCM, but it will not execute the vulnerable payload.
- Moddable
- A broader term that includes patched consoles fitted with an internal modchip.
- Homebrew-capable
- Able to run unsigned community software. This does not automatically mean piracy or unauthorized copies of commercial games.
- CFW
- Custom firmware, generally referring to Atmosphère in the current Switch homebrew ecosystem.
- RCM
- Recovery Mode, a boot-time USB mode used by the original Switch exploit.
- Erista and Mariko
- Erista refers to the original Tegra X1-based Switch hardware. Mariko refers to the revised hardware used in the V2, Lite, and OLED families.
So when someone says a Switch is hackable, ask whether they mean no-solder RCM homebrew, a rare old-firmware software entrypoint, or modchip-based modification. Those are different situations with different costs and risks.
#1 Best Overall
- The next evolution of Nintendo Switch
- One system, three play modes: TV, Tabletop, and Handheld
- Larger, vivid, 7.9” LCD touch screen with support for HDR and up to 120 fps
- Dock that supports 4K when connected to a compatible TV*
- GameChat** lets you voice chat, share your game screen, and connect via video chat as you play
Why the original V1 is different
The original Switch contains a permanent boot-ROM vulnerability in the Tegra boot process, commonly called Fusée Gelée. A payload can be injected while the console is in RCM, before the normal operating system starts. Because the vulnerability is in read-only boot-ROM code, an ordinary system update does not remove it from an unpatched unit. The original technical disclosure is documented in this Fusée Gelée disclosure, while SwitchBrew’s exploit list describes its hardware and firmware scope.
Nintendo later revised the hardware to close that boot-ROM vulnerability. That is why a later original-looking Switch can have the same general shape as an early unit but behave completely differently. The word V1 describes a family and buying shorthand; it is not proof that an individual console is unpatched.
Do these 3 things before closing this tab:
1Scan for outdated or missing drivers - takes under a minute2Clear out junk files and repair common Windows errors3Fix the driver behind crashes, sound loss and screen glitchesHow to identify your Switch
1. Check the model number
The model number is the first filter:
HAC-001means the original Switch family, which contains both unpatched and patched production batches.HAC-001(-01)identifies the revised, better-battery Switch V2. It is patched against the standard no-solder RCM exploit.HDH-001identifies Switch Lite. It is patched against that exploit.HEG-001identifies Switch OLED. It is patched against that exploit.BEE-001identifies Nintendo Switch 2, a separate platform that should not be evaluated with Switch 1 tables.
Model number alone is enough to rule out the normal no-solder route on a V2, Lite, or OLED. It is not enough to approve an original HAC-001.
2. Find the full serial number
Nintendo says the serial number is available in two places:
- On the console: on the bottom of an original Switch or Switch Lite, and beneath the adjustable stand on a Switch OLED.
- In software: open System Settings → System → Serial Information.
For American-market systems, Nintendo says original Switch serials generally begin with XAW or XKW, Lite systems with XJW, and OLED systems with XTW. Regional prefixes differ, so a U.S. serial list should not be presented as a universal worldwide chart. The locations and official model information are covered by Nintendo’s serial-number support page.
Ask a seller for a clear photograph of the entire serial, or ask them to show the value in System Settings. A photo with the final digits hidden may not contain enough information to classify the console.
Community serial ranges for original Switch consoles
The following ranges are a useful screening tool for U.S.-market buying decisions. They are not an official Nintendo compatibility table. They come from tested and reported consoles collected by the community. The source is the Switch Hackable Serial List.
| Prefix | Unpatched range | Possibly patched range | Patched range |
|---|---|---|---|
XAW1 |
XAW10000000000–XAW10074000000 |
XAW10074000000–XAW10120000000 |
XAW10120000000 and up |
XAW4 |
XAW40000000000–XAW40011000000 |
XAW40011000000–XAW40012000000 |
XAW40012000000 and up |
XAW7 |
XAW70000000000–XAW70017800000 |
XAW70017800000–XAW70030000000 |
XAW70030000000 and up |
XAJ1 |
XAJ10000000000–XAJ10020000000 |
XAJ10020000000–XAJ10030000000 |
XAJ10030000000 and up |
XAJ4 |
XAJ40000000000–XAJ40046000000 |
XAJ40046000000–XAJ40060000000 |
XAJ40060000000 and up |
XAJ7 |
XAJ70000000000–XAJ70040000000 |
XAJ70040000000–XAJ70050000000 |
XAJ70050000000 and up |
XKW1 |
None listed | None listed | XKW10000000000 and up |
XKJ1 |
None listed | None listed | XKJ10000000000 and up |
XJW1 |
None listed | None listed | XJW01000000000 and up |
XWW1 |
None listed | None listed | XWW01000000000 and up |
How to read this table: an unpatched-range serial is a strong buying signal, a patched-range serial should not be bought for no-solder homebrew, and a possibly patched serial needs a physical test. The exact boundaries and regional production patterns can change as more consoles are documented, so check the live community source before paying.
The list cannot account for every repair. A refurbished console may have received a replacement motherboard whose exploit status differs from the original board associated with the exterior serial. The community’s serial-checker methodology also explains that its data is compiled from community reports rather than Nintendo’s internal manufacturing records.
Do not infer exploit status from color, bundle, box design, battery life, or the claimed release year. Do not assume that every launch-era console is unpatched, and do not assume that every console described as V1 is suitable.
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Scan for outdated or missing drivers - takes under a minuteDriver Scan →Rank #2
- 6.2” LCD screen
- Three play modes: TV, tabletop, and handheld
- Local co-op, online, and local wireless multiplayer
- Detachable Joy-Con controllers
- Nintendo Switch is the home of Mario & friends
The decisive check: an RCM payload test
A serial lookup is a probability check. For a console in a borderline range—or any expensive purchase—the decisive confirmation is whether it accepts and executes a test payload through RCM.
Safe confirmation procedure
- Fully power off the Switch. Do not merely put it to sleep.
- Use a manufactured, purpose-built RCM jig or another documented method to ground the correct contact in the right Joy-Con rail.
- Hold Volume Up and tap the Power button.
- A successful RCM entry normally leaves the display apparently blank.
- Connect the console to a computer or Android device using a suitable USB-C data cable.
- Use a compatible payload sender. SwitchBrew documents TegraRcmGUI for Windows, fusee-launcher for macOS and Linux, and Rekado for Android in its RCM instructions.
- Send a current test payload such as
fusee-test.bin, rather than immediately installing a full custom-firmware setup. - A successful test-payload execution confirms that the console is vulnerable to the unpatched Fusée Gelée route.
Use a proper jig rather than a paperclip or random metal tool. Bridging the wrong contacts can damage the Joy-Con rail or motherboard. Do not open the console just to determine its exploit status, and do not enable AutoRCM as part of a basic compatibility test.
RCM entry is not the same as exploitability
This is the most common mistake in Switch buying advice. A patched console can still enter RCM because RCM itself was not removed. The relevant question is whether the console accepts and executes the vulnerable payload.
- Black screen after the button sequence: probably indicates only that RCM was entered.
- Computer detects an RCM device: confirms USB/RCM detection, not that Fusée Gelée will execute.
- Test payload executes successfully: confirms the unpatched no-solder route.
- Payload sender reports an error: troubleshoot the cable, sender, driver, payload, and RCM entry before declaring the unit patched.
SwitchBrew explicitly warns that entering RCM does not prove that Fusée Gelée is available. The payload execution result is the important one.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Model-by-model explanation
Original Switch V1: HAC-001
This is the best choice for a buyer who wants homebrew without soldering. Some original units have an unpatched boot-ROM vulnerability, while later HAC-001 units were manufactured after the hardware fix. Use the serial list as a first screen and an RCM payload test as confirmation.
Repair history matters. If a console has had its motherboard replaced, the outside serial sticker may no longer accurately predict the board inside. That is one reason a seller’s test is more valuable than a bare marketplace claim.
Revised Switch V2: HAC-001(-01)
The V2 is the revised, better-battery model and is patched against Fusée Gelée. It cannot use the ordinary no-solder RCM route. Current practical CFW installation generally requires a modchip, although rare old-firmware software exceptions should not be treated as a normal buying strategy.
Switch Lite: HDH-001
Every Switch Lite belongs to the later hardware family and does not offer the original no-solder RCM path. A Lite-compatible modchip is the normal hardware route to CFW. Choose a Lite for portability or price, not because it is easy to modify.
Switch OLED: HEG-001
The OLED model is also patched against Fusée Gelée. Its advantages include a 7-inch display, 64 GB of internal storage, enhanced audio, and a revised dock, as described by Nintendo in its OLED overview. Those improvements do not make it vulnerable to the original exploit.
An OLED can be modified with an OLED-compatible modchip, but that involves delicate board-level work. If the display is the priority, budget for professional installation and the possibility of repair costs. If no-solder homebrew is the priority, an unpatched original Switch is the better purchase.
Rank #3
- This pre-owned product is not Apple certified, but has been professionally inspected, tested and cleaned by Amazon-qualified suppliers.
- 6.2” LCD screen.
- Three play modes: TV, tabletop, and handheld
- Local co-op, online, and local wireless multiplayer
- Detachable Joy-Con controllers
Nintendo Switch 2: BEE-001
Switch 2 should be treated as a separate subject. Its model number, hardware, serial prefixes, firmware versions, exploit history, and homebrew ecosystem are different from those of the Switch family launched in 2017. Do not apply Switch 1 serial tables to it, and do not infer its hackability from the status of an original Switch.
Does firmware version matter?
Firmware does not determine whether Fusée Gelée exists on an unpatched Erista console. The vulnerability is in boot-ROM hardware, so an ordinary system update does not patch it. SwitchBrew lists Fusée Gelée as working across Switch firmware versions when the console has the vulnerable hardware, subject to compatible payload and custom-firmware tools.
Free tools Windows power users keep installed
One-click scans. No signup required.
Firmware still matters operationally. The payload, bootloader, Atmosphère release, patches, and homebrew applications must support the installed system version. As a time-sensitive example, the Atmosphère release page listed Atmosphère 1.11.2 as the latest release and noted basic support for firmware 22.5.0 at the research snapshot of August 10, 2026. Check the current Atmosphère release notes immediately before updating or troubleshooting.
Do not casually downgrade a console, install an old payload against a newer firmware version, or follow an old guide without checking its date. A firmware update may leave the hardware exploit intact while making an existing CFW file set too old to boot.
Rare old-firmware exceptions
Some patched original Switch hardware on unusually old firmware has historical software entrypoints:
- Nereba: firmware 1.0.0.
- Caffeine/PegaScape: firmware 2.0.0–3.0.0 and 4.0.1–4.1.0.
A patched original Switch on firmware 4.1.0 is the most notable exception because it may have a software-only route. The relevant exploit-selection and PegaScape documentation is available from the exploit guide and PegaScape documentation.
Recommended Free Tools
These are narrow, historical cases with strict firmware and setup requirements. Do not buy a patched V2, Lite, or OLED expecting an old-firmware loophole, and do not preserve an old firmware solely because a guide speculates about a future exploit.
Can a patched Switch be modified with a modchip?
Yes. “Patched” means patched against the standard Fusée Gelée route, not permanently impossible to modify by every method. A modchip creates a different boot-time path and is the normal current route for patched V1 units, V2/Mariko consoles, Switch Lite, and Switch OLED. See the ConsoleMods modchip overview and NH hardware guide.
| Console | Normal modchip implication |
|---|---|
| Unpatched V1 | A modchip is usually unnecessary. |
| Patched V1 | A modchip is possible if the board and chip are compatible. |
V2 / HAC-001(-01) |
Normally requires a modchip for current CFW. |
| Lite | Requires a Lite-compatible modchip and installation. |
| OLED | Requires an OLED-compatible modchip and installation. |
Most installations are not beginner-friendly. The work involves microsoldering around extremely small components, including components documented at approximately 0.6 mm × 0.3 mm. A failed installation can damage the motherboard, display connections, eMMC circuitry, or other components and leave the console unable to boot. The NH Switch Guide modchip documentation warns that inexperienced hardware work can render a Switch dysfunctional.
The chip may be relatively inexpensive, but professional installation can be the major cost. Obtain a quote from a reputable installer and compare the total against buying a confirmed unpatched V1. Do not assume that a chip advertised as “solderless” is compatible with every board revision or safe for a novice installation.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Rank #4
- Compact, lightweight handheld system
- Available in a range of fun colors
- Online and local wireless multiplayer
- Nintendo Switch is the home of Mario & friends
What custom firmware enables—and what it does not mean
Homebrew is community-developed software. Depending on the application, it can include utilities, save-management tools, game modifications, emulators, development software, and other unsigned applications.
Running CFW does not by itself prove piracy. However, loading unauthorized copies of commercial games, bypassing copyright protections, cheating online, or distributing copyrighted game dumps creates separate legal, account, and platform risks. This article does not provide or link to ROM repositories, piracy shops, unauthorized installers, or copyrighted game dumps.
Nintendo’s Switch User Agreement prohibits bypassing or circumventing console protections and says unauthorized modifications or devices may cause the console or software to become unusable after an update. That is a contractual and platform-risk statement, not a complete summary of the law in every country.
Online play, bans, warranty, and account risk
No modified setup is ban-proof. Nintendo services can restrict a console or account associated with unauthorized modifications, devices, software, content, cheating, or suspicious activity. The exact enforcement outcome is not something a guide can guarantee.
An offline custom environment is lower-risk than connecting modified system storage to Nintendo services. Some users use an emuMMC or emuNAND arrangement to separate a custom environment from a stock system environment. That separation can reduce accidental crossover, but it is not an immunity shield. The NH Switch Guide FAQ warns that Nintendo receives substantial telemetry and that no configuration should be treated as a perfect ban guarantee.
If online play and eShop access are priorities, preserve a clean stock environment and understand that even careful separation cannot promise continued access. Do not claim that Nintendo cannot detect homebrew, that emuMMC makes bans impossible, or that an online stock mode makes a modified console completely safe.
Warranty and repair consequences vary by country, retailer, and service policy. Opening the console, installing a modchip, or making unauthorized modifications can complicate warranty service; Nintendo’s agreement should be read alongside the applicable local consumer-protection rules.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Buying checklist: what to ask a marketplace seller
- Ask for the exact model number. Request confirmation that it is
HAC-001, notHAC-001(-01). - Ask for a clear full-serial photo. The final digits matter, especially in transition ranges.
- Ask for the software serial. Have the seller show System Settings → System → Serial Information, since the exterior sticker may not tell the whole repair history.
- Ask whether the motherboard has ever been replaced. A board swap can make the exterior serial misleading.
- For a possibly patched unit, request an RCM payload test. A successful test-payload execution is more meaningful than a black screen or USB detection.
- Use a protected purchase method. If the seller will not provide the serial or refuses a compatibility test, treat that as a negative signal.
- Do not rely on appearance. Color, packaging, bundle, claimed production year, and the phrase “launch edition” do not prove exploit status.
If a seller refuses to show the serial, do not pay a premium for a supposed hackable V1. The safest no-solder purchase is an original HAC-001 with a confirmed unpatched status, not merely one described that way in a listing title.
Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11Is an unpatched V1 still worth buying in 2026?
Yes, if no-solder homebrew is your priority. It remains the Switch hardware family with the simplest modern route: a purpose-built RCM jig and payload injection, without opening the console. Its age means condition, battery wear, screen condition, controllers, storage, and repair history should be checked carefully, but a confirmed unpatched status still has practical value.
An OLED may be a better stock console for its display and storage, and a Lite may be preferable for portability. Neither is the better choice if the main goal is easy modification. Once the cost and risk of professional modchip installation are included, a patched OLED or Lite may no longer be the cheaper or simpler option.
Best Value
- Play your way with the Nintendo Switch gaming system. Whether you’re at home or on the go, solo or with friends, the Nintendo Switch system is designed to fit your life. Dock your Nintendo Switch to enjoy HD gaming on your TV. Heading out? Just undock your console and keep playing in handheld mode
- This model includes battery life of approximately 4.5 - 9 hours.
- The battery life will depend on the games you play. For instance, the battery will last approximately 5.5 hours for The Legend of Zelda: Breath of the Wild (games sold separately)
- Model number HAC 001( 01)
Troubleshooting the compatibility check
The serial checker says “possibly patched”
- Do not treat the result as either yes or no.
- Test RCM with a manufactured jig and a known-good USB-C data cable.
- Use a current test payload and compatible sender.
- Repeat with another computer or payload sender if practical.
- Consider a replaced motherboard, damaged serial label, or inaccurate seller information.
The console enters RCM, but the payload does not run
Possible causes include a patched console, an outdated or incorrect payload, a charge-only or unreliable cable, a missing computer driver, an incompatible sender, failure to enter RCM correctly, or a failed test payload. RCM entry alone is not evidence that the exploit works. Check the SwitchBrew RCM documentation and repeat the test methodically.
The Switch boots normally instead of staying on a black screen
The system may not be fully powered off, Volume Up may not have been held at the correct time, or the jig may be defective or misaligned. Do not keep trying improvised metal objects; bridging the wrong Joy-Con contacts can damage the console.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
A modchipped console displays a boot error
Possible causes include missing or incorrect SD-card files, an incorrect payload.bin, outdated modchip firmware, unsupported eMMC configuration, a failed solder joint, a damaged component, or a board-specific cable or firmware mismatch. Do not assume that replacing random files will fix a hardware installation. The NH Switch Guide modchip documentation covers firmware and eMMC considerations.
CFW stopped booting after a firmware update
The usual possibilities are an old Atmosphère version, an old Hekate or payload, incompatible homebrew applications, outdated patches or system modules, or an incomplete SD-card update. Check the current Atmosphère release notes and the current guide for the installed firmware rather than mixing files from an older tutorial with a newer system.
Final decision tree
HAC-001+ confirmed unpatched serial: best no-solder homebrew candidate.HAC-001+ possibly patched serial: test RCM payload execution before buying.HAC-001+ patched serial: keep it stock or price in a professional modchip installation.HAC-001(-01),HDH-001, orHEG-001: assume a modchip is required for the normal current CFW route.BEE-001Switch 2: consult a separate, current Switch 2 guide; Switch 1 tables do not apply.
For most buyers, the answer is simple: find an original HAC-001, verify the full serial, and confirm borderline units with a safe payload test. That is very different from saying that every V1 is hackable or that every patched Switch is impossible to modify.
Frequently Asked Questions
Can I tell whether a Switch is hackable from its color or box?
No. Color, bundle, packaging, battery life, and claimed production year do not establish exploit status. An original HAC-001 still needs a serial check, and a borderline serial should be confirmed with an RCM payload test.
Recommended Free Tools
Does a black screen prove that my Switch is unpatched?
No. A black screen usually indicates that the console entered RCM. Patched consoles can also enter RCM. The meaningful confirmation is successful execution of a compatible test payload.
Can I use Nintendo online services on a modded Switch?
There is no ban-proof setup. A clean stock environment is lower-risk than connecting modified system storage to Nintendo services, and emuMMC can provide separation, but neither guarantees that Nintendo will not restrict the console or account.
Is a Switch OLED better than a V1 for homebrew?
It is better in several stock-hardware respects, including its display, storage, audio, and dock, but not for easy modification. The OLED is patched against Fusée Gelée and normally needs an OLED-compatible modchip.
Should I buy a patched Switch with firmware 4.1.0?
Only if you specifically understand the narrow historical software-exploit requirements. Patched original Switch units on firmware 4.1.0 may have a Caffeine/PegaScape route, but this is not a sensible general buying strategy and does not make V2, Lite, or OLED systems no-solder compatible.
The Tool Desk
Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →The Bottom Line
Buy an original HAC-001 with an unpatched serial if you want the easiest no-solder route to Switch homebrew. A V2, Lite, or OLED is not vulnerable to the original RCM exploit, but those systems can generally be modified with a compatible modchip and expert microsoldering. Check the serial, test doubtful consoles, keep firmware and tools current, and treat online access, warranty, and legal risks as real rather than assuming any setup is safe.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
