Skip to main content

Break Google's Chrome, Get Up to $2 Million

Having recently complained that the notifications of Chrome bugs has somewhat dropped and hinting that Chrome hackers may lose interest in finding new bugs, Google has stepped up not only its bug rewards, but also its Pwnium prize money.

In Pwnium 2, you can participate in the following categories (from the Pwnium 2 blog post):

- $60,000: “Full Chrome exploit”: Chrome / Win7 local OS user account persistence using only bugs in Chrome itself. - $50,000: “Partial Chrome exploit”: Chrome / Win7 local OS user account persistence using at least one bug in Chrome itself, plus other bugs. For example, a WebKit bug combined with a Windows kernel bug. - $40,000: “Non-Chrome exploit”: Flash / Windows / other. Chrome / Win7 local OS user account persistence that does not use bugs in Chrome. For example, bugs in one or more of Flash, Windows or a driver. - $Panel decision: “Incomplete exploit”: An exploit that is not reliable, or an incomplete exploit chain. For example, code execution inside the sandbox but no sandbox escape; or a working sandbox escape in isolation. For Pwnium 2, we want to reward people who get “part way” as we could definitely learn from this work. Our rewards panel will judge any such works as generously as we can.

Sure, to collect the $2 million, there is quite a bit of work and luck involved, but even if you just succeed in one of the two top categories, you are likely to walk away with more money in your pocket than the average American household earns in an entire year.

Pwnium 2 will be held on October 10 at the Hack In The Box conference in Kuala Lumpur, Malaysia.

Contact Us for News Tips, Corrections and Feedback

  • lascar30
    Good luck and have fun.
    Reply
  • master_chen
    ...and a comfy bed in a jail.
    Reply
  • aoneone
    Sign me up.. this is going to be loads of cout
    Reply
  • kcorp2003
    Do i have to be there physically in Kuala Lumpur, Malaysia for this competition?
    Reply
  • metalmania31
    There's huge bug, it's missing the bookmarks sidebar. The most glaring bug of all in the Chrome browser.
    Reply
  • Socialdisorder
    Do guns count?
    Reply
  • proxy711
    metalmania31There's huge bug, it's missing the bookmarks sidebar. The most glaring bug of all in the Chrome browser.Not sure what you're talking about Chrome's favorite pages can be set up just like firefox.
    Reply
  • alidan
    break chrome... i can easily do that, i have about 50 tabs in this window, and another 50 in another, soon windows will bsod because of this...

    o wait, an exploit, not just crashing it? well... cant do that...

    really wish they would improve the whole process thing... firefox uses to little and gets slow, chrome uses to many and crashes my computer, there has to be a middle ground.
    Reply
  • okibrian
    This is easy. I'll just get my wife to use it. She breaks everything! :D
    Reply
  • dreamer77dd
    They are upping the game a lot. I wonder if Mozilla will do the same later on?
    Mozilla just doe snot have the cash flow like Google does.
    Competition is great and we benefit from it.
    When things get lazy and boring, nothing really happens.
    Reply