TLDR Tech / InfoSec
Pwn2Own Berlin 2026, Day Three: DEVCORE Crowned Master of Pwn, $1.298 Million Total
Pwn2Own Berlin 2026 closed with 47 zero-days and $1,298,250 in payouts as DEVCORE claimed Master of Pwn with 50.5 points and $505,000 (highlighted by splitline's two-bug SharePoint chain for $100,000), STARLabs SG's Nguyen Hoang Thach took $200,000 for a VMware ESXi memory corruption with cross-tenant code execution, OpenAI Codex fell a third time to Satoki Tsuji via an external control flaw, Anthropic's Claude Code hit a collision for $20,000, and Viettel Cyber Security escalated privileges on fully patched Windows 11 via integer overflow.
Read the full story