Hackers Pocket $1.26 Million After Exploiting 98 Zero‑Days at Pwn2Own Ireland 2026

Security researchers walked away with a combined $1,262,000 in prize money after the Pwn2Own Ireland 2026 competition concluded, marking the event’s most lucrative payout to date. Participants demonstrated the ability to compromise 98 previously unknown software vulnerabilities, commonly referred to as zero‑days, across a range of devices and platforms.

The contest, organized by the Zero Day Initiative and hosted in Ireland, follows a long‑standing tradition of “real‑world” hacking challenges that began in 2007. Teams are required to reveal a working exploit for a target product while maintaining full control of the device, after which the discovered flaw is disclosed to the vendor for remediation.

Among the 98 flaws uncovered were critical bugs in popular browsers, operating systems, and Internet‑of‑Things devices. While the exact distribution of vulnerabilities has not been disclosed, organizers confirmed that several high‑severity issues affected software that powers millions of users worldwide, underscoring the persistent gap between modern attack techniques and vendor patch cycles.

Contest sponsors, which include major technology firms and cybersecurity firms, allocated the record‑high bounty pool to incentivize responsible disclosure. The $1.262 million total represents a significant increase over previous editions, reflecting both the growing complexity of software ecosystems and the heightened willingness of the industry to reward proactive security research.

Industry observers note that the sheer volume of zero‑days revealed at a single event signals a worrying trend: attackers are increasingly able to uncover and weaponize vulnerabilities before vendors can address them. The public nature of the contest, however, also accelerates the patching process, as vendors receive detailed exploit code and can prioritize fixes accordingly.

Looking ahead, the Zero Day Initiative has indicated that future Pwn2Own events will expand to cover emerging technology categories such as automotive firmware and AI‑driven applications. Organizers hope that the escalating prize pool will continue to attract top talent, driving a cycle of discovery, disclosure, and remediation that benefits the broader digital community.

For now, the 2026 Irish edition stands as a benchmark for both the skill of modern security researchers and the importance of collaborative efforts between hackers, vendors, and sponsors to strengthen the security of everyday technology.