And somewhere, in a deleted commit log, the ghost of “Steve” chuckled—a silent, hexadecimal laugh echoing through the very tool that was meant to reveal all secrets.
Within an hour, “Steve from IDA” was trending globally.
In the aftermath, the open-source project saw a 900% spike in GitHub stars. Ghidra released a “one-click migration tool.” And @RevEng_TrashPanda, the original poster, sold their screenshot as an NFT for 40 Ethereum, funding a new non-profit dedicated to software transparency. IDA Pro 7.2 Leaked Update Download Pc
The comment read: // TODO: Ask legal if we can sell user PC hashes to ad networks. – Steve, Q3
October 23, 2026
On Thursday, Hex-Rays pulled the update. They released a “rollback patch” that was, ironically, larger than the original update. Inside its disassembly, a new comment was found, presumably left by a furious competitor or a heroic insider:
Then, at 11:47 AM GMT, a user on X (formerly Twitter) with the handle @RevEng_TrashPanda posted a single screenshot. It wasn’t a complex exploit or a zero-day vulnerability. It was a of a freshly disassembled Windows DLL. And somewhere, in a deleted commit log, the
For the 50,000 people who clicked “Update Now” on IDA Pro—the legendary, gold-standard disassembler used by malware analysts, government agencies, and hardcore game modders—nothing seemed amiss. The progress bar filled. The hex editor refreshed. The world kept spinning.