Sony Awards Maximum $50,000 Bug Bounty to User
The company issued the top-tier payout after a user identified a hypervisor exploit on the PlayStation platform.
Updated on Oct. 15, 2026 in Gaming
Live Poll
Do you believe software companies should offer financial rewards for users who report security vulnerabilities?
Sony has awarded a $50,000 bounty to a user named 2tonejordy for identifying a critical hypervisor exploit. This payout represents the maximum amount available through the company's long-running bug bounty program.
Why it matters
The program serves as a critical security tool for Sony, incentivizing researchers to help identify and patch vulnerabilities before they can be exploited maliciously. Regular system updates often rely on the successful discovery and reporting of these flaws through official channels.
Sony has paid a total of $1.15 million in bounties since launching the program in 2020, including $228,000 in the 90 days preceding October 2026. Minimum payouts for low-severity bugs start at $250.
The players
Sony
This multinational conglomerate produces the PlayStation gaming consoles and manages the associated digital security infrastructure.
2tonejordy
This individual is the user who received the maximum $50,000 payout for reporting a significant security flaw.
HackerOne
This platform serves as a specialized service provider that facilitates communication between technology companies and independent security researchers.
The details
The user reported the vulnerability via the HackerOne platform, acting after a third party reportedly identified the same issue. Only two researchers have successfully claimed the $50,000 maximum payout since the program's inception.
Timeline
2020: The PlayStation bug bounty program launched to the public.
September 2026: A user reported the hypervisor exploit to Sony.
October 15, 2026: The report details regarding the payout were publicized.
Culture Shift
This payout highlights the professionalization of security research within the gaming industry, where major publishers now actively partner with independent experts. It reflects a shift away from traditional black-box security toward collaborative, incentive-driven bug disclosure models.
The discovery and subsequent patching of these exploits help ensure that the PlayStation 4 and PlayStation 5 systems remain secure for all users. Players benefit from these security updates, which protect their accounts and personal data from potential unauthorized access.
The takeaway
Bug bounty programs provide a lucrative path for security researchers to contribute to the safety of the software they use. These programs effectively turn system vulnerabilities into opportunities for both developers and the broader gaming community.
Further reading
For more on how major platforms manage security and updates, visit the Gaming section.
Source note: This article includes information reported by Game Rant.
Live Poll
Do you believe software companies should offer financial rewards for users who report security vulnerabilities?
