Pwn2Own Day 2: Organizers paid $792K for 56 0-days

Pwn2Own Ireland 2025 Day Two concluded with participants earning $792,750 for 56 zero–days. The Summoning Team led the results after a Samsung Galaxy exploit, racking up a total of 18 points and $167,500 across the first two days. Ken Gannon / 伊藤 剣 of Mobile Hacking Lab and Dimitrios Valsamaras of Summoning Team used five different bugs to exploit the Samsung Galaxy S25, earning $50,000 and 5 Master of Pwn points.

Chumy Tsai of CyCraft received $20,000 for compromising a QNAP TS-453E via a single code injection flaw, while Le Trong Phuc and Cao Ngoc Quy of Verichains earned $20,000 for a Synology DS925+ auth bypass and another flaw. Team ANHTUD chained three bugs to exploit Home Automation Green, securing $16,750 and 3.75 Master of Pwn points. Vendors have 90 days to address the flaws before public disclosure.