SundanceInH2A Brings iOS 6 to iPod Touch 3

A new community project has unlocked something many assumed would never happen: iOS 6 running on the iPod Touch 3rd-generation, a device Apple discontinued more than a decade ago. The tool, called SundanceInH2A, converts official iPhone 3GS iOS 6 firmware into a build that is fully compatible with the iPod Touch 3 and boots untethered, restoring a major missing chapter in the device’s history.

The project was developed by NyanSatan, who released the tool on GitHub along with detailed documentation and a demo showing the firmware running on real hardware. Apple officially capped the iPod Touch 3 at iOS 5.1.1, leaving it one version behind the iPhones of the same era. Now, 13 years later, the device can finally complete the upgrade it never received.

The iPod Touch 3 debuted in September 2009 with an 800 MHz processor underclocked to 600 MHz, 256 MB RAM, and support for iOS 3.1 through 5.1.1. While the hardware was similar to the iPhone 3GS, Apple chose not to ship iOS 6 for this model, likely due to performance limitations and feature fragmentation across the iPod lineup. As a result, the device missed out on system updates that defined the 2012 generation of iOS.

SundanceInH2A bridges that gap using a hybrid firmware approach. It merges pieces of iOS 5.1.1 for the iPod Touch 3 with components extracted from iOS 6.0 for the iPhone 3GS, then rebuilds the parts Apple never released for this model. The result is a working restore bundle that modern tools like idevicerestore can install directly.

The first working iOS 6 environment on the iPod Touch 3

The converted firmware boots normally, enters the setup assistant, and runs the iOS 6 interface with no tethering or temporary loaders. According to the author, the process required patching several core parts of the boot chain:

• iBoot, modified using an HFS+ overflow exploit
• dyld shared cache, rebuilt for compatibility
• ASR, allowing a filesystem layout the device usually rejects
• DeviceTree, tuned for iPod Touch 3 hardware
• Kernelcache, reconstructed from internal iOS 6 components

Apple never released a kernelcache for this model on iOS 6, so the developer assembled one manually from development builds and shared a command that produces a verified working version with a known SHA256 hash.

The tool packages iOS 5.1.1’s Wi-Fi, Bluetooth, and multitouch firmware into the final build, since iOS 6 never included versions of these components for the iPod Touch 3 hardware. Despite this mix, they behave normally in testing, with the only notable difference being slightly lower speaker volume compared to iOS 5.1.1.

This marks the first confirmed and reproducible method to boot iOS 6 on the iPod Touch 3 without hacks that break after reboot or rely on tethered exploits.

Features brought back from the 2012 era of iOS

Although the iPod Touch 3 is far beyond modern support, the firmware update restores parts of the user experience that the device never had access to. iOS 6 introduced many system-wide improvements that were missing from 5.1.1:

• New system UI elements including updated menus, status bar style, refreshed animations, and a redesigned share sheet.
• Apple Maps, which replaced Google Maps in iOS 6 and modernized navigation and interface design.
• Do Not Disturb, introduced as a major feature for managing notifications.
• Improved Safari with faster JavaScript, offline reading list, and a full-screen landscape mode.
• Updated Mail app with VIP inbox support.
• Passbook integration, part of Apple’s early steps toward modern Wallet functionality.
• Facebook system login, which never appeared on earlier iPod Touch firmwares.
• Shared Photo Streams and enhanced iCloud settings where supported.

Not all services remain functional in 2025 due to expired certificates, outdated APIs, and server-side deprecations. Activation works, but App Store, iCloud features, and most third-party apps no longer connect. For retro device enthusiasts, collectors, and developers studying older iOS versions, the restored firmware remains an important milestone.

Technical approach behind SundanceInH2A

The project goes far beyond a simple firmware swap. It reconstructs missing components and patches critical parts of the restore process that Apple’s tools would normally reject.

The hybrid firmware uses the iPod3,1 5.1.1 IPSW and the iPhone2,1 6.0 IPSW as base inputs. SundanceInH2A then:

• Extracts iOS 5 iBoot files and processes them for compatibility.
• Rebuilds a usable iOS 6 kernelcache for the iPod Touch 3.
• Generates a new DeviceTree matching the iPod’s hardware.
• Integrates Wi-Fi, multitouch, and Bluetooth firmware from iOS 5.1.1.
• Patches the iOS 6 dyld shared cache.
• Modifies the FairPlay daemon to allow activation on the modified build.
• Repackages the filesystem, removes OTA elements, and forms a complete custom restore bundle.

The restore uses an iBoot exploit based on an extent buffer overflow in the HFS+ handling code. This exploit, originally identified years ago, allows the device to boot unsigned or modified firmware components without a tether. Once the exploit runs, the device enters an untethered state where it accepts and boots the custom iOS 6 environment even after full shutdown.

The tool also provides its own static build of idevicerestore, making the process consistent across systems.

Known issues and expected quirks

Early testing reports several limitations, although they are minor considering the age of both the software and the hardware:

• Some Wi-Fi networks fail to connect, but this already happens on iOS 5.1.1.
• Speaker output is slightly quieter.
• Online services, including iMessage, App Store, and iCloud syncing, are mostly unusable on iOS 6 in 2025.
• Certain apps that required newer encryption, certificates, or backend APIs no longer function.

Despite these limitations, the system runs smoothly on the device’s limited RAM, and essential features continue working at the expected performance level for the 2009 hardware.

A restoration effort with historical value

Projects like SundanceInH2A are not aimed at making old devices practical again. Instead, they preserve pieces of Apple’s software history that were never made available to the public. The iPod Touch 3 was one of the few Apple devices that missed out on a major iOS release despite having extremely similar hardware to a supported model.

For the retro iOS scene, this tool represents one of the most significant advancements in years. It proves that the early S5L era still holds untapped possibilities and that the community can fill in the gaps left by Apple’s firmware decisions from more than a decade ago.

The developer also notes that a full technical write-up is planned, which will provide deeper insight into how the hybrid firmware and boot chain patches were engineered.