Skip to main content

Google’s Android bug bounty program announces a $1 million prize

Google has been handing out cash rewards to Android bug hunters since 2015 in an effort to keep the mobile operating system safe and secure and running smoothly.

This week the Mountain View, California-based company announced it is increasing its top payout to a whopping $1 million, with a potential for a 50% bonus that pushes it to $1.5 million.

Recommended Videos

Suffice to say, that kind of money means Google is talking about a particular kind of hack, specifically a “full chain remote code execution exploit with persistence which compromises the Titan M secure element on Pixel devices.” Broadly speaking, it means cracking the Titan M chip on a Pixel phone without having physical access to the device. The $500,000 bonus is being offered for exploits found on specific developer preview versions Android.

Google started using the Titan M chip with its Pixel 3 smartphones that launched in 2018. The company describes it as an enterprise-grade security chip designed to secure the user’s most sensitive on-device data, as well as the device’s operating system. For example, Titan M helps the bootloader — the program that validates and loads Android when the phone turns on — ensure you’re running the right version of Android. It also verifies your lock screen passcode and secures transactions in third-party apps.

A bounty worth a million bucks — and more — should ensure the challenge gets plenty of attention among those with the know-how. Dealing with any exploits will allow Google to further bolster the security of its Pixel devices and avoid potential trouble from more malevolent hackers further down the road.

Google payouts

Google said that since it launched the Android Security Rewards program in 2015, it has awarded over 1,800 reports and paid out more than $4 million.

Total payouts in the past year alone amounted to $1.5 million.

“Over 100 participating researchers have received an average reward amount of over $3,800 per finding (46% increase from last year),” Jessica Lin of the Android Security Team wrote in a blog post this week, adding, “On average, this means we paid out over $15,000 (20% increase from last year) per researcher.”

Google’s largest single payment to date saw a bug hunter receive just over $160,000 in 2019 for uncovering a Pixel 3 exploit.

Last year we heard how an 18-year-old whiz-kid picked up $36,000 from Google after discovering a vulnerability that could have allowed a hacker to make changes to the company’s internal computer systems.

Trevor Mogg
Contributing Editor
Not so many moons ago, Trevor moved from one tea-loving island nation that drives on the left (Britain) to another (Japan)…
Google just announced five big updates for the Pixel 8 and 8 Pro
A render of the Google Pixel 8 and Pixel 8 Pro in a Mint color.

While the Android world is currently buzzing around the Samsung Galaxy S24 and OnePlus 12, Google has just announced a few big updates to the Pixel 8 series.

The first update is a new Mint color. It's available for the Google Pixel 8 and Pixel 8 Pro, and if you ask me, it looks fantastic. It's a calming mint shade that's not too intense but also not so muted that it's boring to look at. I think it's a strong contender for one of the best Pixel colors we've seen in a while.

Read more
Everything announced at Google I/O 2023: Pixel Fold, Pixel 7a, and more
The Google I/O 2023 logo outside Mountain View.

Every year, Google takes to Google I/O to announce its plans and products for the coming year. While the event itself will run for several days, the opening keynote presentation covers all the major announcements, from the newest version of Android to the latest versions of the Pixel smartphones.

So, what did Google have in store for us with Google I/O 2023? Quite a lot! From the Pixel Fold to the Pixel 7a to a ton of AI updates and more, here are all of the biggest announcements from Google I/O 2023.
Google Pixel Fold

Read more
I wish I never bought my Google Pixel 7 Pro
The Google Pixel 7 Pro standing up.

As someone who writes about smartphones, tablets, and other smart devices for a day job, it likely comes as no surprise to you that I'm the guy who friends and family come to for advice on which smartphone to buy. In recent years, my advice has more-or-less been the same: "Buy a Google Pixel." They're reliable, as close to an iPhone on Android as you're going to get, and have absolutely phenomenal cameras. They were a slam dunk of a recommendation, and I've been recommending Google's smartphone range to my nearest and dearest for years now.

That's why it's been tough for me to admit this -- but after almost six months with my new Pixel smartphone, I think I'm finally ready to face up to the truth. I wish I'd never bought my Google Pixel 7 Pro, as it's destroying my faith in Google.
I fell in love with an older Pixel

Read more