Security researchers have earned nearly $1 million in just two days at Pwn2Own Automotive 2026, exploiting 66 zero-day vulnerabilities in Tesla infotainment systems, EV charging stations, and automotive navigation receivers.
The competition in Tokyo has seen dramatic results. Synacktiv successfully chained two vulnerabilities—an information leak and out-of-bounds write—to fully compromise the Tesla Infotainment System, earning $35,000. Team Fuzzware.io leads the leaderboard with $213,000 after hacking multiple charging stations including the Phoenix Contact CHARX SEC-3150, ChargePoint Home Flex, and Grizzl-E Smart 40A.
Day one yielded $516,500 across 37 zero-days, while day two added $439,250 from 29 more exploits. Targets included Sony, Alpine, and Kenwood multimedia receivers, plus charging infrastructure from Alpitronic and Autel. Vendors now have 90 days to patch before public disclosure.