Pwn2Own Ireland 2026 Pays $1.26M for 98 Zero-Day Exploits
Ikotas Labs took top honors at Pwn2Own Ireland 2026, earning $361,000 after hacking the Samsung Galaxy S26, OpenAI Codex, and Oracle Autonomous AI Database.
Security researchers collected $1,262,000 in rewards at Pwn2Own Ireland 2026 after exploiting 98 zero-day flaws, according to bleepingcomputer.com. The contest, organized by Trend Micro's Zero Day Initiative, drew 29 research teams targeting products across seven categories, including mobile phones, AI infrastructure, AI coding apps, messaging apps, smart home devices, printers, and wellness healthcare devices.
Ikotas Labs won the competition with 42.5 Master of Pwn points and $361,000 in earnings. The team hacked the Samsung Galaxy S26, OpenAI Codex, and the Oracle Autonomous AI Database, and on the third day collected a $300,000 reward for chaining zero-days to compromise the Google Pixel 10.
Xint finished second with $240,000 and 27.5 Master of Pwn points, while Team ZyGoat took third with $125,000 and 27.5 points.
Daily totals rose sharply over the event: $388,500 for 32 zero-days on day one, $232,500 for 45 unique vulnerabilities on day two, and $641,000 for 21 zero-days on day three. Despite a $300,000 maximum award for a remote hack of Apple's iPhone 17, no contestant registered for an attempt.
Background
At Pwn2Own Ireland 2025, hackers demonstrated 73 zero-day flaws to earn $1,024,750, with Summoning Team winning after targeting the Samsung Galaxy S25, Home Assistant Green, QNAP TS-453E NAS, and multiple Synology devices.
Quick answers
Who won Pwn2Own Ireland 2026?
Ikotas Labs won with 42.5 Master of Pwn points and $361,000 in rewards.
How much did hackers earn at Pwn2Own Ireland 2026?
Competitors collected a total of $1,262,000 for exploiting 98 zero-day flaws.
Which devices were targeted at Pwn2Own Ireland 2026?
Targets spanned seven categories: mobile phones, AI infrastructure, AI coding apps, messaging apps, smart home devices, printers, and wellness healthcare devices.