Researchers earned $1,323,750 for demonstrating 49 unique zero-day vulnerabilities at the inaugural Pwn2Own Automotive in 2024. The three-day contest covered Tesla systems, electric-vehicle chargers, in-vehicle infotainment and automotive operating systems. The headline figure refers to the 2024 event—not the later 2025 competition, which awarded a different total.
How much did researchers earn at Pwn2Own Automotive?
At the inaugural 2024 event, organized by the Zero Day Initiative (ZDI), researchers earned $1,323,750 across three days while demonstrating 49 unique zero-days, according to ZDI’s September 24, 2024 announcement. That is the precise amount behind the rounded “$1.3 million” headline.
The 2025 edition had a separate result: ZDI reported awarding $886,250 for 49 zero-days over three days. Sina Kheirkhah of Summoning Team was named Master of Pwn, with 30.5 points and $222,250 awarded, in ZDI’s January 23, 2025 final report. The two totals describe different contests and should not be combined.
What is Pwn2Own Automotive?
Pwn2Own Automotive is an automotive-focused vulnerability research competition organized by ZDI. Tesla sponsored the inaugural edition, and VicOne was a partner. Researchers demonstrate qualifying exploits against contest targets under the event’s rules; the awards recognize those demonstrations rather than measuring the prevalence of flaws in consumer vehicles.
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREEClear out junk files and repair common Windows errorsFree Scan →The first edition grouped targets into four areas: Tesla, in-vehicle infotainment (IVI), electric-vehicle chargers and operating systems. Its scope reflects how vehicle-related technology extends beyond the car itself: infotainment connects drivers to navigation and internet features, while charging equipment has its own software, wireless and network interfaces.
#1 Best Overall
- Charge with Confidence: ChargePoint builds reliable, flexible EV charging stations for home, business, and fleets. Get 24/7 support and access to hundreds of thousands of North American charging locations.
- Charge Smart: With the user-friendly ChargePoint Mobile App, you can control your electric car charger, manage reminders, connect to smart home devices, find stations, get data and charging info, and access the latest features. Note: WiFi is needed for certain functionalities and troubleshooting steps if connectivity issues arise.
- Vast Network: Wherever you go, ChargePoint’s network includes 274k+ stations across North America and Europe and 565k+ roaming partner stations.
- Safe & Durable: Rely on this UL-certified EV charger for safe home charging. It can be installed indoors or outdoors by an electrician and includes a cold-resistant cable.
- Fast & Powerful: This EV charger charges 9× faster than a 120V outlet, delivering up to 45 mi/hr., dependent upon your vehicle. It features a J1772 connector for all non-Tesla EVs and requires a 20A or 80A circuit. For Tesla EVs, this will require an adapter.
What Tesla system was hacked?
Tesla was one of the inaugural event’s target categories, but the cited 2024 announcement does not identify a specific Tesla product or describe a particular Tesla exploit. It therefore supports saying Tesla systems were in scope, not naming a model or claiming that a particular retail Tesla vehicle was compromised.
ZDI’s 2026 competition rules name the Tesla Universal Wall Connector as a Level 2 EV-charger target. Those rules set a $40,000 base prize and four Master of Pwn points for that target; separate add-ons award $10,000 and one point for Charging Connector Protocol/Signal Manipulation, and $20,000 and two points for a Charging Connector Attack. These are prize terms for the 2026 competition, not reported payouts or proof of a successful exploit at the 2024 event.
Rank #2
- Flex Level 1 EV Charger - The EVDANCE Level 1 electric car charger is compatible with J1772 electric vehicles and plug-in hybrid vehicles (North American Standard). *Tesla requires a SAE J1772 adapter.
- Convenient to Use - This charger has both NEMA 6-20 plug for 16A 240V charging (3.68kW, 10-12 mi/h) and a NEMA 6-20 to 5-15 plug adapter for 12A 120V charging (1.44kW, 2-5 mi/h). The included bag makes it easier to carry on the go. It also has a 25ft cable length, you can use it flexibly from anywhere in the garage or driveway.
- Check Your Outlet Type -This charger works with standard 120V NEMA 5-15/5-20 outlets (2-5 mph charging speed) and 240V NEMA 6-20 outlets (10-12 mph) . It's not compatible with NEMA 6-15/10-30/14-30/14-50/6-50 outlets – you'll need a NEMA 14-50/14-30/10-30/6-50 to 6-20 adapter (sold separately) to connect.
- Compatible EV Models -This EV charger works with most major electric vehicles, including Ford, Chevrolet, Hyundai, Audi, Nissan Ariya, Rivian R1S, Kia, and others. However, it's not compatible with Mini Cooper Electric Hardtop,Toyota Prus Prime/Z4X/RAV4Prime, Porsche Taycan Base/4S/Turbo/Turbo S or Tesla models (Tesla requires a J1772 to Tesla Adapter, sold separately). For a full list of compatible models, check out the Full Compatibility List on our product page.
- Indication Displays - LED display that can tell you the status as well as indicate errors while charging your electric vehicle.
Were EV chargers and infotainment systems exploited?
Yes. The documented 2025 contest included demonstrations against both EV chargers and infotainment products. ZDI’s day-one report lists successful demonstrations involving Alpine, Kenwood and Sony infotainment systems, as well as Phoenix Contact, ChargePoint, Autel and Ubiquiti charger targets, alongside Automotive Grade Linux.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →The report describes a range of techniques, including stack and heap buffer overflows, OS command injection, integer overflow, a hard-coded cryptographic key, an OCPP-related bug and multi-bug exploit chains. These descriptions show the kinds of software and protocol weaknesses demonstrated in the contest; they do not establish that every product from a named vendor, or every unit sold, is vulnerable.
Rank #3
- WORKS WITH EVERY NON-TESLA EV: Standard J1772 connector plugs straight into Ford, Chevrolet, Hyundai, Kia, Nissan, BMW, Volkswagen, Audi, Rivian, Lucid and every other EV or plug-in hybrid sold with a J1772 port - no adapter needed. Tesla drivers can charge too, using the J1772 adapter that comes with the car.
- PLUG IN, NO HARDWIRING: Level 2 charger delivers up to 40A to fully charge most EVs overnight. Plugs into a 240V, 4-prong NEMA 14-50 outlet (the RV/range type - NOT a dryer outlet) on a dedicated 50A circuit. The extra-long 25 ft cable easily reaches across a garage or driveway. Before ordering, check your car's port type and that you have the right outlet.
- CONTROL & SAVE FROM YOUR PHONE: A stronger built-in antenna keeps the charger online even in a garage or basement. Use the free app to start/stop charging, set speed (6-40A), get reminders, and track energy use and cost. Schedule off-peak overnight charging to cut your electric bill. Requires 2.4 GHz WiFi.
- SAFETY-CERTIFIED & WEATHERPROOF: Independently tested and certified (UL, ETL, FCC, Energy Star). A fully sealed IP66 / NEMA 4 housing stands up to rain, snow, heat and dust indoors or out, and internal steel shielding protects the electronics for years of reliable use.
- GLOW-IN-THE-DARK HOLSTER: The included high-visibility holster glows in the dark so you can find and dock the plug easily at night. Holds the connector securely when not in use.
Why do car and charger systems have so many attack surfaces?
Infotainment: more than a stereo
ZDI describes modern IVI systems as supporting navigation, in-car internet and Wi-Fi, while also connecting to other vehicle systems through the CAN bus. That combination makes infotainment a computer with both driver-facing functions and links to vehicle networks. A demonstrated infotainment flaw is significant as a security finding, but it does not by itself prove that an attacker can control a whole vehicle.
Chargers: wireless, network and physical interfaces
Charger attack surfaces can include companion mobile apps, Bluetooth Low Energy (BLE), the Open Charge Point Protocol (OCPP), exposed services, other communication protocols and physical interfaces accessible to a typical user. The exact route depends on the target and exploit; the existence of these interfaces does not mean each one was used in a particular demonstration.
Rank #4
- WORKS WITH EVERY NON-TESLA EV: Standard J1772 connector plugs straight into Ford, Chevrolet, Hyundai, Kia, Nissan, BMW, Volkswagen, Audi, Rivian, Lucid and every other EV or plug-in hybrid sold with a J1772 port - no adapter needed. Tesla drivers can charge too, using the J1772 adapter that comes with the car. The extra-long 25 ft cable easily reaches across a garage or driveway.
- HARDWIRED - PROFESSIONAL INSTALL: This Level 2 charger is hardwired (not plug-in), so a licensed electrician installs it per National Electrical Code. It delivers up to 48A on a dedicated 60A, 240V circuit - enough to charge most EVs fully overnight. Want more speed? You can set DIP switches 4 and 5 to unlock 50A on a dedicated 70A circuit. Before ordering, check your car's port type and that your electrical panel can support the circuit.
- CONTROL FROM YOUR PHONE: A stronger built-in antenna keeps the charger online even in a garage or basement. Use the free app to start and stop charging, set the charging speed (6-48A), get reminders, and track how much energy and money each charge uses. Requires a 2.4 GHz home WiFi network.
- SAFETY-CERTIFIED & WEATHERPROOF: Independently tested and certified (UL, ETL, FCC, Energy Star). A fully sealed IP66 / NEMA 4 housing stands up to rain, snow, heat and dust indoors or out, and internal steel shielding protects the electronics for years of reliable use.
- GLOW-IN-THE-DARK HOLSTER: The included high-visibility holster glows in the dark so you can find and dock the plug easily at night. Holds the connector securely when not in use.
Across both categories, the important distinction is between a vulnerability demonstrated on contest hardware and a verified safety impact on products in ordinary use. ZDI’s event reports describe contest results and exploit techniques, but do not provide independent safety testing of consumer products or a complete vulnerability-by-vulnerability CVE list.
Recommended Free Tools
Quick Recap
Best Value
- [Up to 9x Faster Charging Speed]: Provides up to 46 miles/hour charging speed via hardwired connection (48 amp - up to 9x faster than a standard wall outlet) or up to 38 miles/hour via the NEMA 14-50 plug (40 amp). Professional installation recommended for optimal safety and performance. [Install The Power Outlet Cord]: No smaller than 8AWG if charge 40-48A, we suggest 6AWG cord.(1.The input side is belongs to the electrician electric automobile regulation scope, need to use three 6AWG cable wires for 48A; 2.The charging cable belongs to the automotive connector certification standard, so the 8AWG cable can meet the 48A.)
- [DESIGNED WITH J1772 Connector for All North America j1772 Connector EVs/PHEVs. Not fits for Tesla/Nacs Connector Cars(j1772 to Tesla adapter needed)]: Compatible with Tesla cars (Adapter needed, not included), Ford, GM, Audi, Kia, Honda, Kia, Hyundai, Gmc, Chevrolet Bolt, VW ID 4, Nissan Leaf, Ford Mustang Mach-E, IONIQ 5 2024 and before, BMW i3, i4, iX, Jeep Wrangler 4xe, etc. [Not fits for Nac connector cars-Kia EV6 2025/EV9,Ariya 2025&2025 loniq 5(J1772 to Tesla adapter needed)]
- [Safety & Faster Charging with ETL, FCC, Energy Star Certified]: Meets the Safety Criteria Defined by: SAE J1772, UL2231-1/-2, UL 991, UL 2231, UL 2251, UL1998 and UL 2594. (ETL and FCC certified EV car charger with 3-year Warranty)
- [Plug-play Mode(The Default Setting), Smart Touch Screen, No APP Needed]: Clearly show the charging amperage, charging speed, input voltage, delay time, etc. For the touch buttons: 1. Pull out the charging gun before press the buttons, otherwise no respond; 2. Long press "Ⓐ" or "Time" button to enter the setting interface, then you can adjust the amperage from 16A to 48A freely or Set the charging start time; 3. You can do "factory reset" if doesn't charging.
- [Smart WIFI APP, You can Set the Charging Period]: By APP, you can wirelessly check the charging cost, history, fully-charged notification, track the charging status, during off-peak period, etc. [Wi-Fi Reset/Factory Reset Function, Add New Device Quickly]: If you can't find your device or you have replaced a new phone, just pull out the charging latches, simultaneously long press the Ⓐ button and time adjustment button on the product screen until it shows "Factory Reset", then wait 3-5 seconds and re-start your device.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
