GoKawiilPwn2Own Ireland 2026 pays out $1.26M for 98 zero-day exploits
Trend Micro's Zero Day Initiative concluded Pwn2Own Ireland 2026, awarding $1,262,000 across three days as researchers demonstrated 98 zero-day vulnerabilities in devices including the Samsung Galaxy S26, Google Pixel 10, OpenAI Codex and Oracle's Autonomous AI Database. Ikotas Labs won the contest overall with $361,000 and 42.5 Master of Pwn points, including a $300,000 payout for a chained exploit against the Pixel 10, ahead of runners-up Xint and Team ZyGoat.
GoKawiil's interpretation of the reporting above, not reported fact.
The large payouts and sheer number of exploited bugs across flagship phones and emerging AI systems suggest these newer product categories still carry significant unpatched security risk. Vendors like Samsung get advance notice of findings so they can patch before public disclosure, which is the stated purpose of such contests, though no contestant attempted Apple's iPhone 17 this year despite a $300,000 bounty being offered.
- Researchers earned $1,262,000 total for 98 zero-day exploits at Pwn2Own Ireland 2026.
- Ikotas Labs topped the leaderboard with $361,000, including a $300,000 chained exploit on the Google Pixel 10.
- No one attempted Apple's iPhone 17 despite a $300,000 reward being on offer.
Samsung Galaxy S25 Smartphone — With security researchers relentlessly probing Samsung's flagship phones for zero-day vulnerabilities at events like Pwn2Own, it's a great reminder to keep your device updated and consider the latest Galaxy model with its improved security patches. The Galaxy S25 offers cutting-edge hardware alongside Samsung's ongoing commitment to closing these kinds of exploits quickly.
See Samsung Galaxy S25 Smartphone on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: bleepingcomputer.com, 2026-10-09
Published there as: “Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.