Hackers scored a whopping $1,298,250 by exploiting 47 zero-day vulnerabilities at Pwn2Own Berlin 2026.
The world’s top security researchers gathered at the OffensiveCon conference in Berlin to push the limits of their skills and snag the biggest prizes. At the end of it all, they pocketed a staggering sum of $1,298,250 – a testament to the complexity and depth of modern software vulnerabilities.
The competition, now in its 15th year, is a unique opportunity for hackers to demonstrate their expertise while helping vendors prioritize security patches. The prize money is a major incentive, but it’s not just about the cash – it’s a chance for researchers to gain recognition, build their reputation, and drive the industry forward.
This year’s event saw hackers targeting a range of devices, from laptops and smartphones to servers and IoT devices. The 47 zero-day flaws discovered were a mix of critical and high-severity vulnerabilities, with some affecting multiple vendors.
What this means: The Pwn2Own Berlin 2026 results serve as a stark reminder of the ongoing cat-and-mouse game between hackers and security vendors. As long as there are vulnerabilities to be found, hackers will keep exploring them. The real question is: how quickly can vendors respond to these discoveries, and implement robust security measures to prevent future exploits?
Who won the prize money?
While the article doesn’t specify the individual winners, we can assume that some of the top hackers from previous years, such as Yuichi Koaki and Frans Rosen, may have taken home significant chunks of the prize money. Others, like Amat Cama and Vasily Kravets, are known for their expertise in exploiting zero-day vulnerabilities.
What’s next?
The Pwn2Own Berlin 2026 competition highlights the importance of ongoing security research and vulnerability disclosure. As the industry continues to grapple with the complexities of modern software, it’s clear that hackers will keep pushing the limits of what’s possible. The real challenge lies in staying one step ahead of the threats, and that’s where collaboration between vendors, researchers, and users becomes crucial.
