Over $350,000 was paid out on the second day of Pwn2Own Ireland 2024, including for an exploit targeting the Samsung Galaxy S24.
With the $516,250 earned by participants on the first day of the event, the total payout at the hacking contest organized by Trend Micro’s Zero Day Initiative (ZDI) has already reached nearly $850,000, and there are two more days left.
One of the most noteworthy exploits on the second day targeted a Samsung Galaxy S24 smartphone. Ken Gannon of NCC Group earned $50,000 for an exploit chain that involved five vulnerabilities and achieved a shell and the installation of an app.
ZDI has also offered rewards of up to $250,000 for Pixel 8 and iPhone 15 exploits, but no one has signed up to hack these smartphones at Pwn2Own Ireland.
Another significant reward — $40,000 — was earned on the second day for an exploit targeting the AeoTec Smart Home Hub.
Rewards of $40,000 were also earned for an exploit targeting the Synology BeeStation BST150-4T NAS device, and separately for an exploit chain going from a QNAP QHora-322 router to a QNAP TS-464 NAS device.
ZDI has awarded $30,000 each for two Sonos Era 300 smart speaker hacks.
For rewards ranging between $3,000 and $21,000, Pwn2Own participants successfully demonstrated exploits against Canon and HP printers, Lorex and Ubiquiti cameras, and QNAP and Synology NAS devices.
Related: $300,000 Offered for WhatsApp Exploit at Pwn2Own Ireland
Related: Hackers Earn $1.3M for Tesla, EV Charger, Infotainment Exploits at Pwn2Own Automotive
Related: Tesla, OS, Software Exploits Earn Hackers $1.1 Million at Pwn2Own 2024
