The Zero Day Initiative is offering a $1 million reward to security researchers who will demonstrate a zero-click WhatsApp exploit at its upcoming Pwn2Own Ireland 2025 hacking contest. The record bounty targets zero-click security flaws that allow code execution without user interaction on the messaging platform used by more than three billion people worldwide. Meta, alongside Synology and QNAP, is co-sponsoring the Pwn2Own Ireland 2025 competition, which will take place from October 21 to October 24 in Cork, Ireland. "As you might have guessed from the title, we're excited to announce that Meta is co-sponsoring this year's event, and they are hoping to see some great WhatsApp exploits. They are so excited for it, we're putting up $1,000,000 for a 0-click WhatsApp bug that leads to code execution," the Zero Day Initiative announced Thursday. "We also will have lesser cash awards for other WhatsApp exploits, so be sure to check out the Messaging section for full details. We introduced this category last year, but no one attempted it. Perhaps a number with two commas will provide the needed motivation." The contest features eight categories targeting mobile phones, messaging apps, home networking equipment, smart home devices, printers, network storage systems, surveillance equipment, and wearable technology, including Meta's Ray-Ban Smart Glasses and Quest 3/3S headsets, as well as Samsung Galaxy S25, Google Pixel 9, and Apple iPhone 16 flagship smartphones. The ZDI has also...
Pwn2Own hacking contest pays $1 million for WhatsApp exploit
BleepingComputer
·Sergiu Gatlan
·Published Aug 1, 2025
·Updated
Affected Software
1 affected component
Meta WhatsApp
Frequently Asked Questions
1
What is the main topic of this article?
The article discusses a $1 million reward for exploiting a zero-click vulnerability in WhatsApp at the Pwn2Own 2025 hacking contest.
2
What security implications are discussed in the article?
The article highlights the potential risks associated with zero-click exploits that can compromise user security without any action needed from the victim.
3
What product is primarily affected by the exploits discussed?
The primary product affected by the exploits mentioned in the article is Meta's WhatsApp.
4
What type of vulnerabilities are targeted for the contest?
The contest is specifically targeting zero-click security flaws, which do not require user interaction.
5
Who is offering the reward for the exploit?
The reward is offered by the Zero Day Initiative, which organizes the Pwn2Own hacking contest.