Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own

During Pwn2Own Ireland 2026, three teams demonstrated exploits against the Google Pixel 10, collectively earning more than $560,000. The Ikotas Labs team earned $300,000 by chaining multiple bugs to remotely hack a Pixel phone. Another team earned $150,000 for an exploit involving a previously known flaw, and a third team earned $112,500 by chaining a zero-day with a known vulnerability. The event also included exploits against printers, smart speakers, smart home hubs, AI infrastructure, and coding tools, with a total payout exceeding $1.2 million. Vendors will be provided full exploit details for remediation. There is no indication of these exploits being used in the wild.

The demonstrated exploits allow remote compromise of Google Pixel 10 devices by chaining multiple vulnerabilities, including zero-day and known flaws. This could enable attackers to gain unauthorized access or control over the device. However, these exploits were demonstrated in a controlled environment and have not been reported as actively exploited in the wild. Vendors are informed to address these vulnerabilities.

Affected vendors will receive full details of the exploits to develop patches or mitigations. There is no public indication that these vulnerabilities are currently exploited in the wild. Users should monitor vendor advisories for official patches or updates addressing these issues. Until patches are released, no specific mitigation steps are provided.