Okay, before anyone tells me this isn't possible and didn't happen, listen to this: I bought a N3DS XL running on sysnand 9.0 and installed gateway emunand on it. I installed a bunch of CIA files and even a custom Jibanyan theme! (Unlinked NANDs of course) Everything was going awesome, but then the regular N3DS exploit came out, so I decided to gift the N3DS XL to my little sister. At this point I had emunand still installed on the 3DS XL SD card when I gave it to her. I then formatted sysnand and cleaned up the system, making it look as new as possible to gift it to her. This is where it gets real. She opens up the N3DS XL and sets it up like normal. Then the homescreen shows up. The Jibanyan JPN only theme is still installed on a US N3DS XL SysNAND. My first though was "Wait. What? THAT SHOULDN'T BE POSSIBLE. How did EmuNAND cross over to SysNAND!?" She was excited because she loves Yokai Watch, so I figured it was a plus. Then came the next step : We updated SysNAND to 9.6 and the Jibanyan JPN theme was still there. BUT SYSNAND DOESN'T LET EXPLOITS RUN? ESPECIALLY NOT UNSIGNED CODE? This is where I'm stuck at... HOW DID THIS HAPPEN!? Sad part now is that she saved the theme under theme manager, then tried to load it and it spit back the error of "Cannot load theme". So as of right now, Jibanyan is dead, but his custom theme still shows up under saved themes. Can anyone chime in on how this is even possible, and if there's any way to force the saved theme to load? tl;dr: Custom JPN theme that was installed on unlinked EmuNAND, was somehow installed on US SysNAND, then SysNAND was updated to 9.6, and the theme was still there. How did this happen? Here's a picture for what I'm talking about: Bumping for any response! I really want to know what happened here.