Skip to content

Image: static1.squarespace.com · rights & removal

Pwn2Own Ireland 2026

Reporting by Zero Day InitiativeRead the original at thezdi.com

Objectivity score: 54 out of 100.
Difficulty 78 out of 100 (Expert)— Read Analysis

Executive Summary

Day Three of Pwn2Own Ireland 2026 concluded a highly competitive security assessment, featuring numerous high-stakes exploits across various categories. Key events included successful breaches of the Oracle Autonomous AI Database by two separate teams, one securing $150,000 and dominating the Master of Pwn standings with 15 points via Google Pixel 10 exploitation. Other notable successes involved zero-day finds against Brother hardware for a substantial $20,000 payout, as well as multiple collisions involving consumer devices like the Philips Hue Bridge Pro.
The competition for the title remained fiercely contested, highlighted by Ikotas Labs' massive jump to become Master of Pwn after their Google Pixel 10 exploit yielded $300,000 and 30 points. The scheduled attempts indicated a broad range of focus areas, spanning mobile devices (Google Pixel 10, Samsung Galaxy S26), smart home technology, AI infrastructure, and printers. Despite the conclusion of many runs, one final attempt remained scheduled as the Master of Pwn title was unsettled entering the last hour of judging.

Facts Only

Seven attempts were scheduled for Day Three at Pwn2Own Ireland 2026, with approximately $1.33 million on the board. The Google Pixel 10 drew three separate attempts: Xint (11:15 AM), Ikotas Labs (2:00 PM), and Valsamaras/Ken Gannon (Djini.ai)/Valsamara team (6:30 PM). BunkyoWesterns attempted the Samsung Galaxy S26 at 4:15 PM. Philips Hue Bridge Pro saw three attempts, while Home Assistant Green had two closing attempts. Successful exploits included one targeting Brother MFC-L8970CDW for $20,000 by FuzzingLabs. Tim Becker and Yves Bieri of Xint achieved a successful remote exploit of Google Pixel 10 earning $150,000 and 15 Master of Pwn points. Ikotas Labs became the Master of Pwn after exploiting Google Pixel 10 for $300,000 and 30 points. Team MAMMOTH attempted Home Assistant Green at 7:00 PM.

Full Take

The narrative presented here is a structured documentation of competitive excellence within the domain of vulnerability research; its primary function is to establish clear hierarchies of achievement rather than drive political or social change. The immediate pattern visible is a resource-intensive, high-stakes competition modeled after elite sporting events, where

From the original · Zero Day Initiative

Blog Pwn2Own Ireland 2026 - Day Three Results & Master of Pwn Day Three of Pwn2Own Ireland 2026 wrapsup with 17 attempts scheduled, roughly $1.33 million on the board.
Read the full story at thezdi.com

Sentinel — Human

Confidence

The text reads as an immediate, high-energy recap from a niche cybersecurity event. Its dense incorporation of specific handles, rapidly updating scores, and enthusiastic informal phrasing strongly suggests human live reporting rather than algorithmic generation.

Signals Detected
low severity: Informal and jargon-heavy language (e.g., 'Boom chaka laka!', 'remote lasso-ing')
low severity: High density of real-time, specific event tracking typical of specialized community reporting.
Human Indicators
Extremely specific and rapidly changing scorekeeping (Master of Pwn accumulation).
Frequent use of handles (@username) and associated team names, indicating direct sourcing from live feeds.
Presence of idiosyncratic, excited language ('Boom chaka laka!').
Pwn2Own Ireland 2026 | Huntaegis