Hackers Earn $1.26m for 98 Zero-Day Flaws at Pwn2Own Ireland
Security researchers uncovered 98 zero-day vulnerabilities across various smart devices and software.
The annual Pwn2Own 2026 hacking competition in Ireland has officially concluded. Security researchers participating in the event successfully exploited 98 previously unknown critical vulnerabilities (zero-days) across various devices and software, earning a total of $1,262,000 in cash prizes.
Security flaws and rewards
Organised by Trend Micro's Zero Day Initiative (ZDI), the Pwn2Own contest brings together leading ethical hackers and cybersecurity specialists from around the world. The main objective of the competition is to discover and practically demonstrate weaknesses in widely used hardware, including smart hubs, routers, and network-attached storage (NAS) devices.
The 98 vulnerabilities demonstrated during the event were unknown to technology giants and manufacturers prior to the contest. Under Pwn2Own rules, detailed information regarding the discovered issues is handed directly to the respective vendors so they can issue timely security patches for their users.
Why this matters
Global competitions such as Pwn2Own play a crucial role in strengthening modern cybersecurity. Rather than letting critical flaws fall into the hands of malicious actors or be sold on the black market, ethical hackers disclose them through an official framework while receiving substantial financial rewards for their work.
Technology companies are already actively working on corresponding updates to resolve the identified vulnerabilities as quickly as possible. Users, including those in Georgia, are once again reminded of the critical importance of keeping their software and devices regularly updated.