Dopamine

This is a known bug in Dopamine 3.0.10 where iOS 26 beta builds were incorrectly flagged as unsupported, even though nothing changed in the version-checking logic between 3.0.9 and 3.0.10. It was fixed in Dopamine 3.0.11 (via PR #1038), so update to 3.0.11 or later. As a temporary workaround on 3.0.10, downgrade to Dopamine 3.0.9, which still jailbreaks iOS 26 beta correctly.

This is caused by Dopamine 3.0.9's broken hookd compatibility shim for Frida on iOS 26. The hookd trampoline saves only x29/x30 and can clobber registers Frida expects preserved, and its scanner only patches svc #0x80; it does not handle Frida's separate brk #1337 page-plan requests. As a result, the mapped agent traps with EXC_BREAKPOINT, frida-server may be killed with EXC_GUARD, and executable-memory operations can trigger a reboot/kernel panic.

Fix/update path:
1. Use a Dopamine/basebin build newer than 3.0.9 that includes the hookd changes exposing a versioned memory-hook/code-patching API for Frida, including preservation of real vm_write and VM protection errors.
2. Use a matching Frida/frida-gum build that calls the jailbreak-provided hookd memory hooks instead of relying on syscall-instruction rewriting.
3. Install the updated Frida server package and restart it:
dpkg -i frida_<version>_iphoneos-arm64.deb
4. Connect with a version-matched Frida client, launch a sandboxed app such as Calculator in the foreground, and attach to its PID.

The relevant changes are the Dopamine PRs "Expose a memory hook API for Frida" and "hookd: Preserve write and protection errors", plus the frida-gum change "darwin: Use jailbreak-provided memory hooks". Until those fixes are available in a released Dopamine/Frida pair, avoid attaching to sandboxed apps on Dopamine 3.0.9 with Frida 17.9.10 because the failure can reboot the device and drop the jailbreak. Attaching to some system processes such as SpringBoard may still work, but that is not a workaround for sandboxed apps.