Security Research
Showing results for 
Search instead for 
Do you mean 

Avoiding collisions: How we’ll handle (potential) duplications between Pwn2Own and Pwn4Fun

Brian_Gorenc ‎03-06-2014 01:32 PM - edited ‎03-06-2014 02:02 PM

This year we introduced Pwn4Fun to give Google and ZDI the opportunity to give money to charity.


So what happens if the same vulnerability presents itself twice next week in Vancouver, at both the Pwn2Own competition and the Pwn4Fun charity event? Two separate events, two separate judging processes – but it’s possible. Naturally, we have a plan.


A researcher that is the first to win his category at Pwn2Own wins, as usual. They get paid big bucks, as usual. All contest rules apply, as usual, and the standard judging and verification processes will occur. Nothing changes, even if the same vulnerability was used at the earlier Pwn4Fun event.


Putting it formally: Submissions for Pwn4Fun will not be considered when determining collisions for Pwn2Own.


Putting it financially: Two payouts one bug – one payout for the contestant, one for charity.


As CanSecWest and this year’s Pwn2Own contest approach, we’re incredibly excited to be offering not only record-breaking prizes for competitors but, with Pwn4Fun, a sponsors-only charity event that’ll raise – we hope – some serious money for a very worthy cause. See you there.

0 Kudos
About the Author


Nov 29 - Dec 1
Discover 2016 London
Learn how to thrive in a world of digital transformation at our biggest event of the year, Discover 2016 London, November 29 - December 1.
Read more
Each Month in 2016
Software Expert Days - 2016
Join us online to talk directly with our Software experts during online Expert Days. Find information here about past, current, and upcoming Expert Da...
Read more
View all