Pwn2Own Ireland reportedly produces 98 zero-days and $1.262m in rewards
SecurityUnverifiedUpdated:
BleepingComputer reports that the concluded Pwn2Own Ireland 2026 contest produced 98 zero-day flaws—security bugs demonstrated before patches were available—and awarded $1,262,000 to participants.
29 teams demonstrate flaws across seven categories
According to BleepingComputer, 29 research teams spent three days targeting products in seven categories, including mobile phones, AI infrastructure, AI coding apps, messaging apps, smart-home devices, printers, and wellness healthcare devices.
The report says the demonstrations yielded 98 zero-day flaws. Under the contest rules described in the report, vendors have 90 days to patch disclosed flaws before Trend Micro's Zero Day Initiative publicly shares details.
BleepingComputer reported that Pwn2Own Ireland 2025 produced 73 demonstrated zero-day flaws and $1,024,750 in rewards.
The 2026 contest reportedly concluded with 98 zero-day flaws and $1,262,000 in rewards, compared with the figures reported for the 2025 event.
A 90-day vendor window before technical disclosure
The reported demonstrations would move flaws affecting current consumer and enterprise targets into a vendor remediation window before technical details are publicly released. The reported total is also higher than the prior year's contest figure.
Sources
- BleepingComputerHackers get $1,262,000 for 98 zero-days at Pwn2Own IrelandRead source →