Capstone – multi-platform, multi-architecture disassembly framework

Hackers cheer the update, then instantly spiral into “but what about Keystone?”

TLDR: Capstone released new updates, including one that fixes security problems, reinforcing its status as a widely trusted code-reading tool. But the comment spotlight swung fast to a new mystery: people were less interested in applause than in asking why related project Keystone seems to be missing in action.

Capstone — an open-source tool that helps experts translate raw machine code into something humans can read — just dropped two updates in rapid succession: 6.0.0-Alpha9 with security fixes, and 5.0.9 as a stable patch release. On paper, that’s solid, responsible maintenance stuff. In community terms? It was less “calm release day” and more everyone nodding approvingly before swerving into side-quest chaos.

The official pitch is almost absurdly polished: huge device support, works across loads of operating systems, fast enough for security work, and praised by a who’s-who of reverse-engineering legends. The vibe is basically, “this is the standard, deal with it.” And honestly, the strongest opinion in the room seems to be that Capstone has already earned that reputation. Even the testimonials read like a hall of fame induction.

But the real drama came from the comments, where one user, saagarjha, delivered the kind of needle-scratch moment that powers internet gossip: “what is going on with Keystone?” Suddenly, the conversation stopped being just about Capstone’s glow-up and became a mini-mystery about its sister project. That one line carries the classic community mood: yes, great update, but also why is the other thing weirdly quiet? It’s the most hacker-forum reaction possible — applaud the release, then immediately investigate the family drama. In other words, Capstone got its victory lap, and the comments turned it into a cliffhanger.

Key Points

  • Capstone is presented as a lightweight disassembly framework for binary analysis and reverse engineering with multi-platform and multi-architecture support.
  • The framework supports a wide range of architectures including ARM, ARM64, BPF, Ethereum VM, Mips, PowerPC, RISC-V, Webassembly, and X86.
  • Capstone is implemented in pure C, offers an architecture-neutral API, provides instruction detail and some semantic information, and is designed to be thread-safe and embeddable.
  • The project provides bindings for many programming languages and native support for Windows and multiple Unix-like operating systems including Mac OSX, iOS, Android, Linux, BSD, and Solaris.
  • Capstone 6.0.0-Alpha9 was announced on May 29, 2026 with fixes for two GitHub security advisories, while Capstone 5.0.9 was announced on May 28, 2026 as a stable patch release correcting version metadata.

Hottest takes

"what is going on with Keystone?" — saagarjha
"the standard" — community mood
"great update, but..." — everyone reading that comment
Made with <3 by @siedrix and @shesho from CDMX. Powered by Forge&Hive.