Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

IoT Security

Tesla Charger Exploits Earn Hackers $129,000 at Pwn2Own

Hackers earned more than $700,000 on the first two days of Pwn2Own Automotive 2025 for EV charger and infotainment exploits.

Pwn2Own Tesla charger exploits

Significant rewards were earned by researchers on the second day of the Pwn2Own Automotive 2025 hacking competition organized this week by Trend Micro’s Zero Day Initiative (ZDI) in Tokyo, Japan. 

A total of $335,500 was paid out on the second day of the event, which, with the $382,750 awarded on the first day, brings the total to $718,250.

Of the second day’s total, $129,500 was earned for exploits targeting Tesla’s Wall Connector charger. 

One team earned $50,000 — the maximum amount for hacking the Tesla Wall Connector — for taking over the device and crashing it. 

Another team earned $45,000 for what ZDI described as an inventive Tesla charger exploit that leveraged the charging connector. 

Two other teams earned $22,500 and $12,500 rewards for hacking Tesla EV chargers — the amounts are smaller because the exploits involved previously known bugs.  

One more attempt to hack the Tesla Wall Connector is scheduled for Friday, which could add another $50,000 to the $129,500, if the exploit is successful.

Advertisement. Scroll to continue reading.

Other significant rewards were earned on the second day for Wolfbox ($50,000), Phoenix Contact ($25,000), Autel ($23,000) EV charger exploits. 

At Pwn2Own Automotive 2025, no one is scheduled to attempt a Tesla vehicle hack, for which the organizers had been prepared to hand out a car and up to $500,000 in cash for an autopilot exploit.

At last year’s event, participants earned a total of $1.3 million for exploits targeting Teslas, EV chargers and infotainment systems.

Related: Details Disclosed for Mercedes-Benz Infotainment Vulnerabilities

Related: Over $1 Million Paid Out at Pwn2Own Ireland 2024

Related: Synology, QNAP, TrueNAS Address Vulnerabilities Exploited at Pwn2Own Ireland

Written By

Eduard Kovacs (@EduardKovacs) is senior managing editor at SecurityWeek. He worked as a high school IT teacher before starting a career in journalism in 2011. Eduard holds a bachelor’s degree in industrial informatics and a master’s degree in computer techniques applied in electrical engineering.

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Delve into big-picture strategies to reduce attack surfaces, improve patch management, conduct post-incident forensics, and tools and tricks needed in a modern organization.

Register

Organizations are investing heavily in third-party risk management, but breaches, delays, and blind spots continue to persist. Join this live webinar as we examine the gap between how organizations think their third-party risk programs are performing and what’s actually happening in practice.

Register

People on the Move

Anurag Jain has been appointed Senior Vice President of Engineering at CodeHunter

CTERA has appointed Tal Sarfaty as Senior Vice President of Cybersecurity.

Quantum Secure Encryption has named Michael Massing as Chief Technology Officer.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.