Google Pixel 10 breached by three teams at Pwn2Own Ireland

At the Pwn2Own Ireland hacking competition in Cork, three research teams successfully demonstrated remote exploits against fully patched Google Pixel 10 devices. The successful breaches resulted in total prize payouts exceeding $560,000.

Ikotas Labs secured the top prize of $300,000 by chaining multiple issues together, though the entry was labeled a “collision,” indicating it utilized a bug already known to the organizer. Other winners included the team Xint, which received $150,000 for a single bug collision, and a team consisting of Dimitrios Valsamaras, Ken Gannon, and Tenia Valsamara, who earned $112,500 for a chain involving one collision and one zero-day vulnerability.

All three successful attacks were classified as remote exploits, meaning the researchers gained access through web content or radio links such as Wi-Fi, Bluetooth, NFC, or baseband. The Zero Day Initiative (ZDI), which manages the contest, has not yet released the technical details of how these exploits function. Vendors typically have a 90-day window to address these vulnerabilities before technical specifics are made public.