Pwn2Own hackers broke through Tesla twice and won 350000 US dollars and a Model 3
CTOnews.com, March 26 (Xinhua)-- Pwn2Own 2023, the most famous and lucrative hacker contest in the world, opened on March 23. Tesla was hacked twice in the contest, which won 350000 US dollars and a Model 3 car.
Pwn2Own is a competition organized by Zero Day Initiative. Pwn2Own contestants earn points for each goal they successfully break in order to compete for prize money and championship. On the first day of the competition, the Synacktiv team from France successfully carried out a TOCTOU attack on Tesla Gateway. As a result, he won $100000, 10 Master of Pwn points and a Tesla Model 3.
On the second day of the competition, the Synacktiv team broke through Tesla again, using heap overflows and OOB writes to take advantage of Tesla's infotainment system. Won the Tier 2 award, $250000 and 25 Master of Pwn points.
Tesla's security response team verified the hackers' findings at the scene and is expected to fix these vulnerabilities through OTA updates.
CTOnews.com noticed that Synacktiv broke not only Tesla but also Windows 11 in this competition, for which they received 30, 000 US dollars. In the end, they took half of the total bonus, totaling $530000 (CTOnews.com Note: currently about 3.641 million yuan).
