Google will now pay up to $1.5 million for finding Android and Chrome security bugs, says it has 'greatly appreciated collaborating with the researcher community'
- Google raised rewards to $1.5m for top‑tier Android exploits, prioritizing risks beyond AI‑detectable flaws
- Chrome’s program now offers up to $250K for full chain browser exploits, plus bonuses for Miracle Ptr bypasses
- The company paid $17.1m to researchers in 2025, with lifetime payouts exceeding $81m since 2010
Google is now offering up to $1.5 million in bounty to whoever can find the biggest, baddest, Android exploits - whereas “lesser” exploits - ones that can be found and reported on with AI, are getting a proportional downgrade.
Google’s engineers announced changes to the company’s Android and Chrome vulnerability rewards programs, saying they will now reward up to $1.5 million to anyone who can find a zero-click full chain Pixel Titan M2 compromise with persistence. Those that find the same bug, sans the persistence part, can expect up to $750,000 in rewards.
“We are revising our program scope to emphasize categories that...
Copyright of this story solely belongs to techradar.com. To see the full text click HERE
