PS4/PS5 Black Ops Port Plagued by PS3-Era Security Flaws That Never Got Fixed

When Activision quietly dropped PlayStation 4 and PS5 ports of Call of Duty: Black Ops 1 and 2 last week, the reception was largely enthusiastic — fans were simply glad to have the beloved titles accessible on modern hardware again, even without meaningful visual upgrades. That goodwill evaporated fast. Within days of launch, modders had already found their way into multiplayer lobbies, exploiting vulnerabilities that allowed rapid rank inflation and effectively gutting the game's entire progression system. Players began flagging matches as "unplayable," and the wave of complaints grew loud enough to force Activision's hand.

Activision responded by removing specific playlists from Black Ops 1 in an attempt to contain the damage, confirming to content creator Tdawgsmitty that it is actively investigating the matter. But the band-aid measure has done little to calm the community, and questions are mounting about how these exploits made it through to launch in the first place. The answer, according to one modder interviewed by Tdawgsmitty, is both simple and damning: the port developer Iron Galaxy never updated the save file encryption from the PS3 era.

The modder explained that exploiting the game involves copying a save file to a USB drive and running it through a website that decrypts the data — a method that worked on PlayStation 3 and, apparently, still works now. Players with access to jailbroken PS4 or PS5 hardware can manipulate that save data and re-import it, opening the door to stat modification and lobby manipulation. The fact that Activision and Iron Galaxy left the encryption architecture completely unchanged is what makes all of this possible.

Making matters worse, there are already people monetizing these exploits — selling stat-boosting and modding services to other players. The one silver lining the modder was willing to offer is that no aimbots have surfaced yet, meaning cheaters are not currently getting direct combat advantages that ruin the experience of being shot at. Still, the situation underscores a deeply lazy approach to porting legacy titles, where cosmetic accessibility comes at the cost of basic security hygiene.

Activision has not provided a timeline for a fix, and the community is watching closely to see whether the investigation produces anything substantive. Given that both Black Ops 1 and 2 generated considerable revenue from this PlayStation re-release, there is financial incentive for Activision to protect its product — but trust in the company's ability to patch legacy code quickly is, understandably, in short supply right now.