Zero Day Initiative | Blog
Follow
Pwn2Own Ireland 2025: Day Three and Master of Pwn
Pwn2Own Ireland 2025 is in its final day, already awarding $792,750 for 56 zero-day bugs. CyCraft Technology withdrew their attempt on the Amazon Smart Plug. Fuzzinglabs failed to exploit the QNAP TS-453E within the time limit. Xilokar successfully exploited the Phillips Hue Bridge with four bugs, though one collided with a prior submission, earning them $17,500. Chris Anastasio successfully exploited the Lexmark CX532adwe printer using a type confusion bug, earning $20,000. Interrupt Labs successfully compromised the Samsung Galaxy S25 using an input validation bug, gaining camera and location access and $50,000. Yannik Marchand also exploited the Phillips Hue Bridge, using three bugs, with two colliding, earning $13,333. The competition continues with 17 attempts remaining. The blog will be updated with live results. Several researchers successfully demonstrated the exploitation of various devices. These findings highlight vulnerabilities in common technology.