Announcing the Project Zero Prize
Summary: Google Project Zero announced the Project Zero Prize on 2016-Sep-13, a contest to find a vulnerability or bug chain achieving remote code execution on multiple Android devices knowing only the devices' phone number and email address. Prizes are $200,000 for the first winning entry, $100,000 for the second, and at least $50,000 from Android Security Rewards for additional winning entries, with bugs filed in the Android issue tracker during a six-month contest period and every vulnerability and exploit technique in winning submissions made public.
Key Takeaway: Google is paying $200,000 for a chain that reaches multiple Android devices using only a phone number and email address, and it expects to learn from the result either way - if the first prize is won in thirty seconds, or if there are no submissions at all.
Read the original at Google Project Zero ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026