Pixel 10 Exploits Earn Researchers More Than $560,000 at Pwn2Own Ireland
Summary
Researchers earned more than $1.2 million at Pwn2Own Ireland 2026. Three teams received a combined $562,500 for Pixel 10 exploits, while other exploits targeted devices and services including Sonos, Oracle, OpenAI and Nvidia products.
Key points
- Pwn2Own Ireland 2026 awarded participants more than $1.2 million for exploits targeting a range of devices and services.
- Three teams earned a combined $562,500 for Pixel 10 exploits; the top payout was $300,000 for chaining bugs to remotely hack a phone.
- Some Pixel exploit payouts were reduced because the demonstrations involved previously known vulnerabilities.
- Other targets included a Sonos Era 300 speaker, Oracle Autonomous AI Database, OpenAI Codex, Nvidia Dynamo, and smart home products.
- No one targeted the iPhone 17 or WhatsApp, which each had a maximum prize of $300,000.
- Vendors will be provided with the full details of the exploits.
Article Details
- Event Type
- Pwn2Own Ireland 2026 exploit competition
- Impact
- Participants demonstrated exploits against multiple devices, software products, and services, earning more than $1.2 million in total. The article reports no broader real-world impact; affected vendors will receive full exploit details.
People
Dimitrios ValsamarasDemonstrated a Google Pixel exploit with Ken Gannon, earning $112,500; the exploit chained a zero-day with a previously known vulnerability.Ken GannonDemonstrated a Google Pixel exploit with Dimitrios Valsamaras, earning $112,500; the exploit chained a zero-day with a previously known vulnerability.Tim BeckerReceived $150,000 for a Google Pixel exploit involving a previously known flaw.Yves BieriReceived $150,000 with Tim Becker for a Google Pixel exploit involving a previously known flaw.
Vendors
BrotherPwn2Own participants earned $20,000 for hacking Lexmark and Brother printers, and the Garmin Index BPM blood pressure monitor.CanonLexmark CX532adwe, Oracle Autonomous AI Database, Home Assistant Green, Chroma, Garmin Index BPM, and Canon imageFORCE 1643F.GarminPwn2Own participants earned $20,000 for hacking Lexmark and Brother printers, and the Garmin Index BPM blood pressure monitor.GoogleThe highest rewards were paid out for Google Pixel 10 exploits, which were demonstrated by three teams.Home AssistantResearchers received roughly $30,000 for exploits targeting the Samsung Galaxy S26 and the Home Assistant Green smart home hub.LexmarkPwn2Own participants earned $20,000 for hacking Lexmark and Brother printers, and the Garmin Index BPM blood pressure monitor.LiteLLMones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lighting hub.Nvidiawere paid out for several exploits, including ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lightingOpenAIof $40,000 were paid out for several exploits, including ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge ProOracleRewards of $40,000 were paid out for several exploits, including ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge ProPhilipsAI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lighting hub.SamsungLast year, Valsamaras and Gannon earned $50,000 for hacking a Samsung Galaxy S25 device. They later showed how they exploited vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobileSonosIn addition to the Pixel exploits, a significant reward, $50,000, was earned by a researcher for a Sonos Era 300 smart speaker hack.
Products
BixbyThey later showed how they exploited vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobile devices.Brother printersPwn2Own participants earned $20,000 for hacking Lexmark and Brother printers, and the Garmin Index BPM blood pressure monitor.Canon imageFORCE 1643FCX532adwe, Oracle Autonomous AI Database, Home Assistant Green, Chroma, Garmin Index BPM, and Canon imageFORCE 1643F.ChromaLiteLLM, Philips Hue Bridge Pro, Lexmark CX532adwe, Oracle Autonomous AI Database, Home Assistant Green, Chroma, Garmin Index BPM, and Canon imageFORCE 1643F.Dynamoout for several exploits, including ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lighting hub.Garmin Index BPMPwn2Own participants earned $20,000 for hacking Lexmark and Brother printers, and the Garmin Index BPM blood pressure monitor.Google Pixel 10The highest rewards were paid out for Google Pixel 10 exploits, which were demonstrated by three teams.Home Assistant GreenResearchers received roughly $30,000 for exploits targeting the Samsung Galaxy S26 and the Home Assistant Green smart home hub.iPhone 17No one targeted the iPhone 17 and WhatsApp, both of which had a maximum prize of $300,000.Lexmark CX532adwewere paid out for exploits involving Sonos Era, Galaxy S26, LiteLLM, Philips Hue Bridge Pro, Lexmark CX532adwe, Oracle Autonomous AI Database, Home Assistant Green, Chroma, Garmin Index BPM, and Canon imageFORCELexmark printersLiteLLMones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lighting hub.OpenAI Codexof $40,000 were paid out for several exploits, including ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smartOracle Autonomous AI DatabaseRewards of $40,000 were paid out for several exploits, including ones targeting Oracle Autonomous AI Database, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge ProPhilips Hue Bridge ProDatabase, OpenAI Codex, Nvidia’s Dynamo AI inference framework, the LiteLLM AI gateway, and the Philips Hue Bridge Pro smart lighting hub.Samsung Galaxy S25Last year, Valsamaras and Gannon earned $50,000 for hacking a Samsung Galaxy S25 device. They later showed how they exploited vulnerabilities in Samsung software, including the virtual assistant Bixby, to hack mobileSamsung Galaxy S26Researchers received roughly $30,000 for exploits targeting the Samsung Galaxy S26 and the Home Assistant Green smart home hub.Sonos EraIn addition to the Pixel exploits, a significant reward, $50,000, was earned by a researcher for a Sonos Era 300 smart speaker hack.Sonos Era 300In addition to the Pixel exploits, a significant reward, $50,000, was earned by a researcher for a Sonos Era 300 smart speaker hack.WhatsAppNo one targeted the iPhone 17 and WhatsApp, both of which had a maximum prize of $300,000.