[BUG] iPad Pro M4 all Lara tweaks no-op after exploit/VFS/sandbox escape

[Cyrene963]

Describe the bug

On an iPad Pro M4 running iPadOS 18.6, Lara reports success for exploit, VFS, sandbox escape, and tweaks, but none of the applied changes are visible after respring.

This is not limited to fonts. I tested several different Lara features and all of them report success, but the device shows no visible change.

To Reproduce

1. Run exploit in Lara.
2. Init VFS.
3. Escape Sandbox.
4. Apply a tweak from SpringBoard Tools or Font Overwrite.
5. Respring.
6. Observe that Lara logs success, but the change does not appear on the device.

Expected behavior

Applied changes should be visible after respring.

Device Info

• Device: iPad Pro M4
• Chip: M4
• iOS Version: iPadOS 18.6
• Jailbroken before? No
• Lara version / commit: latest build as of 2026-05-23

Logs

lara started: 2026-05-23 21:53:54

(ka) enabled keepalive

(utils) no kernelcache...

xpf start error: Failed to open kernelcache

(utils) T1SZ_BOOT: 0x0
(utils) TASK_TNEXT_OFFSET: 0x50
(utils) THREAD_MUPCB_OFFSET: 0x108
(utils) PROC_PID_OFFSET: 0x60
(offs) initialized offsets

(ds) exploit success!

(fetchkcache) kernelcache fetch success!

(offs) using cached kernelcache

(vfs) vfs_init starting...
(vfs) file overwrite ready!

(sbx) patched 6 extensions
(vfs) vfs_init done

vfs ready!

(sbx) escaped!

sandbox escape ready!

(vfs) target /System/Library/Fonts/Core/SFUI.ttf <- <source font>
(vfs) vfs_overwritefile returned: 0
(vfs) file overwritten
font changed to Comic Sans MS
(vfs) overwrite done!

Additional context

• This is not limited to fonts. I also tested several different Lara features and all of them report success, but the device shows no visible change.
• The issue seems to affect any applied tweak, not just one specific feature.
• I can provide a screen recording if useful.

Pre-submission checklist

• I have searched existing issues and confirmed this is not a duplicate.
• I can reproduce this on the latest version / commit of Lara.
• I have provided sufficient detail (device info, logs, reproduction steps) for a maintainer to investigate.
• I agree to communicate respectfully with the developers and understand that harassment may result in restricted support.

[rooootdev]

thats completely and utterly impossible. is your phone in English?

[neonmodder123]

could you please send a screenshot of /System/Library/Fonts/Core/ ? its weird that it didnt change. i have also noticed that you have truncated the logs. could you also please share the full logs please? thanks

[Cyrene963]

thats completely and utterly impossible. is your phone in English?

Yes,of course.

[Cyrene963]

Sure — I’ll attach the full untruncated logs and a screenshot of /System/Library/Fonts/Core/.

The earlier log snippet was truncated in the issue body, so I’ll post the complete output here in the next comment. If there’s a specific file or tweak you want me to include in the screenshot, let me know and I’ll capture that too.