Zero Day Initiative | Blog

Pwn2Own Returns to Ireland with a One Million Dollar WhatsApp Target

Pwn2Own is returning to Cork, Ireland from October 21-24, 2025, with Meta joining as a co-sponsor. A significant $1,000,000 bounty is offered for a 0-click WhatsApp bug leading to code execution. The event will feature eight target categories, including Mobile Phones, Messaging, SOHO Smashup, Smart Home Devices, Printers, NAS Devices, Surveillance System Devices, and Wearables. Mobile phone targets will now include USB attack vectors, while the SOHO Smashup category has been made more challenging. Smart Home Devices and Surveillance System Devices are consolidated from previous categories. Printers will feature Brother as a new target alongside existing ones. NAS devices from Synology and QNAP are included, with specific Synology packages in scope. Wearable targets include Meta Ray-Ban Smart Glasses and Meta Quest 3/3S with different prize levels for interaction requirements. The Master of Pwn title will be awarded to the overall winner based on accumulated points. Registration closes on October 16th, 2025, at 5:00 p.m. Irish Standard Time, with no exceptions for late entries.
favicon
thezdi.com
thezdi.com
Image for the article: Pwn2Own Returns to Ireland with a One Million Dollar WhatsApp Target