Hundreds of game clones that were decompiled or vibe-coded with AI help have appeared in browsers over the past few weeks, Kotaku reported on October 9, 2026. The piece, by Lewis Parker, says titles such as Call of Duty: Black Ops, Halo: CE, Grand Theft Auto: Vice City, Skate 3 and The Simpsons: Hit and Run were ported to run in a browser tab, and that some play well. This post explains what is claimed, what is verified, why AI changes the economics of reverse engineering, and what the legal and security picture looks like. We do not link to any of the unofficial sites, and we recommend against playing on them.
TL;DR: claimed vs verified
| Question | Answer |
|---|---|
| What was reported? | Hundreds of AI-decompiled or vibe-coded browser clones of games; some big titles play well (Kotaku, October 9, 2026) |
| Which titles? | Black Ops, Halo: CE, GTA: Vice City, Skate 3, The Simpsons: Hit and Run, and more |
| Which AI built them? | Unverified. Kotaku credits Claude Opus 5.5 with strong decompiling ability; IGN suspects a similar approach for a GTA 5 port but says it is unconfirmed |
| Is the "hundreds" figure confirmed? | No independent count in coverage we found |
| Are they legal? | Mostly not if they distribute copyrighted code or assets |
| What are publishers doing? | Cease-and-desist letters and takedowns, one at a time |
How the wave started
According to a roundup on Pasquale Pillitteri's site, an X post from the account Radiant Optimizer on October 8 claimed Black Ops zombies, Skate 3, Halo and Modern Warfare 2 now run in a browser tab, and reached about 7.8 million views. That roundup says Kotaku points to this post as the trigger. Before that, on October 6, Scene Gamers, citing IGN, reported that a GTA 5 browser port went viral and then went offline, with reports suggesting Cloudflare intervened and the operator publicly asking who wanted the source code.
Scene Gamers also noted that a week earlier Bethesda sent a cease-and-desist letter to a fan project called Fallout: New York, which IGN said was built with Claude Opus 5.5. Those details are from secondary reports, and we could not verify them against the original IGN pieces.
Earlier, in September, Tom's Hardware reported that GTA Vice City and GTA III returned to browsers after a DMCA takedown, built on an open-source reverse-engineering effort. That is a different, community-driven route to the same outcome, and it predates the AI wave.
Why AI makes this cheap now
Decompiling a game means turning a compiled binary back into something close to readable source code, then understanding it well enough to rebuild it for a new platform. Browsers run on JavaScript and WebAssembly, so a port means recompiling or rewriting game logic, rendering and input for that target. Historically this took skilled engineers months, as volunteer projects like the Vice City reimplementation show.
Large language models change two things. They read decompiler output and name functions and variables, which is the slow, tedious part. And they generate glue code, such as a renderer wrapper, input handlers and a loader, quickly. Kotaku's argument is that work which once took months can now be done much faster, and that is why the ports are showing up "overnight". That is the author's assessment, not a measured study.
We have covered the constructive side of this ability. Our post on porting Command & Conquer: Generals to macOS and iOS, the Pokemon Gen 1 recomp project explored the same idea, and our reverse engineering as a prompt case studies show how well models handle reconstruction from binaries. The same capability that helps preserve old software also enables rapid copying of current commercial games.
What "vibe-coded" does and does not mean here
Vibe coding is building software by prompting a model and accepting its output with minimal manual review. Applied to games it covers two different things. One is genuine decompilation of an existing game's binary into source. The other is a clone: a new game that imitates the look and feel of an existing one without using its code. Kotaku lumps them together with the phrase "decompiled or vibe-coded". For legal purposes they differ a lot. A clone that copies no code or assets may be legal if it avoids protected expression. A port built from the original binary and assets very likely is not.
We also saw an earlier example of AI-made game clones in our look at whether Opus 5 could one-shot a Call of Duty-style shooter in the browser, which generated a new procedural game rather than copying an existing one.
Why browsers are the target
The browser is an attractive destination for several reasons. A web page needs no install, so a link spreads on social media the way a video does. WebAssembly lets near-native game code run inside a tab, and WebGL and WebGPU give access to the graphics card. Hosting a static bundle is cheap, and the files can be mirrored across many domains quickly. The Pasquale Pillitteri roundup notes the GTA 5 port downloaded about 700 MB at launch versus nearly 170 GB for the PC version, a figure we have not verified and that suggests heavy asset compression or substitution.
That same distribution model is also what makes the ports fragile. A single hosting provider or domain registrar can end a project in hours. Mirrors keep appearing, which is why commentators describe the dynamic as whack-a-mole.
What the reaction looks like
Scene Gamers describes the community as divided. Some celebrate the clones as proof of what AI-assisted tooling can do for preservation and access. Others argue the projects add no original ideas and simply recreate or remix existing work. Preservationists make a separate point: many old games are no longer sold, so a port of an abandoned title is a different ethical question from a port of a game released this year. The coverage so far does not separate these cases, and neither does the law.
The legal picture
Publishers are using the usual tools. DMCA notices go to hosting providers and platforms. Cease-and-desist letters go to project operators. Infrastructure providers can drop a site quickly, which is the likely explanation for the GTA 5 disappearance, though that remains unconfirmed.
Kotaku's concern, as summarized by secondary outlets, is that takedowns are whack-a-mole: lawyers can send letters and get specific clones removed, but if a port can be produced quickly, nothing stops another version appearing. Scene Gamers raises the same question about GTA 6, which it says releases November 19. We cannot verify that date or predict how publishers will respond.
Some clarity on law, not legal advice: copyright covers code and assets, so distributing either without permission is infringement in most jurisdictions. Some jurisdictions allow narrow reverse engineering for interoperability, but that rarely covers publishing a playable copy. Projects that reimplement an engine and require users to supply their own legally obtained game files sit in a different, more defensible place, which is how several long-running community projects operate.
Security and safety for people who click
Unofficial game sites are a known malware and scam vector. A "free" copy of a hit game in a browser is a classic lure, and pages that disappear in hours leave no accountability. Browser pages can run arbitrary scripts, request notifications, and push you to download extra files. If you want to play these games, buy them from an official store. If you are a developer experimenting with AI-assisted reconstruction, work on software you have the rights to, or open-source titles.
Agent builders should note a related risk. When AI agents can fetch binaries, run decompilers and publish web pages autonomously, a prompt mistake can turn into a copyright or security incident. AgentBeam, the agent security platform from the explainx.ai team, stops AI agents before they take dangerous actions, which is relevant for any pipeline that publishes generated artifacts.
What this means for developers and studios
- Studios. Assume your compiled binary can be turned back into readable code faster than before. Server-side logic, authentication and online services are harder to clone than offline single-player code. Several reports note Halo servers were also reproduced, which suggests online services are not immune.
- Open-source developers. The clean-room approach matters. Our coverage of PhotoCraft, a clean-room Photoshop built in Rust shows the line between inspired-by and copied.
- Security teams. Our piece on the reverse engineering MCP server covers how decompilation tools are being exposed to agents, which has both defensive and offensive uses.
- Everyone else. Treat viral "play X in your browser" posts as unverified until you can see the source, authors and license.
What we could not verify
- The total number of clones and whether "hundreds" is accurate
- Which AI models were actually used for any given port
- Who took the GTA 5 port offline and why
- Whether any publisher has filed lawsuits, as opposed to takedown notices
- Whether the ports distribute original assets or require user-supplied files
If publishers issue statements or new takedowns land, we will add them here.
Related reading
- Command & Conquer: Generals ported to macOS and iOS with an AI model
- Pokemon Gen 1 recomp case study
- Did Opus 5 one-shot Call of Duty in the browser?
- Reverse engineering as a prompt: DX-Ball, Notion and TH04 case studies
- PhotoCraft: clean-room Photoshop in Rust
- Reverse engineering MCP server and agent security
Based on press reports as of October 10, 2026; details may change.