Google Adds $1.5 Million Top Reward to Android Bug Bounty Program

guest · Nov 21, 2019

Google Adds $1.5 Million Top Reward to Android Bug Bounty Program
November 21, 2019
https://www.bleepingcomputer.com/ne...ion-top-reward-to-android-bug-bounty-program/

Google is expanding the Android bug bounty program with new data exfiltration and lockscreen bypass categories as well as a $1 million reward for critical vulnerabilities targeting the Titan M chip.
Over the past 12 months, Google has paid out over $1.5 million USD in bug bounty rewards and over $4 million USD for over 1,800 reports since the program was launched in 2015.

Starting today, Google is expanding the program by offering a $1 million reward for developing a "full chain remote code execution exploit with persistence" that compromises the Titan M secure chip on Pixel devices. This is up from the previously top award of $200,000 for a critical vulnerability that compromises a Pixel's Trusted Execution Environment (TEE).

In addition to the $1 million bounty, Google is also offering an additional 50% bounty for vulnerabilities found on certain developer previews of Android, bringing the top potential reward to $1.5 million USD.

"We are introducing a top prize of $1 million for a full chain remote code execution exploit with persistence which compromises the Titan M secure element on Pixel devices. Additionally, we will be launching a specific program offering a 50% bonus for exploits found on specific developer preview versions of Android, meaning our top prize is now $1.5 million."
Click to expand...

Google: Expanding the Android Security Rewards Program

Log in or Sign up

Google Adds $1.5 Million Top Reward to Android Bug Bounty Program

guest Guest

Log in or Sign up

Google Adds $1.5 Million Top Reward to Android Bug Bounty Program

guest Guest

Useful Searches