Only the latest release is supported with security fixes.

Do not post exploitation steps, firmware privilege-escalation details, private device data, or credentials in a public issue.

Use GitHub Private vulnerability reporting for this repository. Include the Thor firmware version, app version, reproduction conditions, expected result, and observed result. Please remove PSN credentials, tokens, device serials, network addresses, and unrelated personal information before submitting.

If Private vulnerability reporting is temporarily unavailable, open a public issue containing no sensitive details and ask the maintainer for a private contact route.

Reports about Thor To DS4's own source, APK, release signing, input bridge, and cleanup behavior are in scope. General vulnerabilities in Android, PS Remote Play, PlayStation, AYN firmware, or third-party projects should be reported to their respective vendors or maintainers.