The second day of Pwn2Own has come to an end, and the security bypass of the four major browsers turned out to be a one-man show. One of the participating hackers managed to bypass the security measures of Internet Explorer 11, Google Chrome, and Safari, winning a total of $225,000.
Mozilla's Firefox had already been hacked on the first day of the competition, but on the second day, researcher ilxu1a managed to win $15,000 by exploiting a bug in the application.
However, the biggest rewards, as mentioned above, were won by Junghoon Lee (lokihardt) from South Korea, who bypassed the security checks of Internet Explorer 11, Google Chrome, and Safari. The researcher took about 30 minutes on each browser to present the zero-days he discovered.
A bug in Chrome earned him $75,000. Another bug earned him another $25,000 after allowing him to gain system privileges. He also received $10,000 for proving a vulnerability in a beta version of the browser.
Lee also managed to bypass the security controls of Microsoft's Internet Explorer 11, earning an additional $65,000.
During his third presentation, he bypassed Apple's Safari protection mechanisms, winning $50,000.
