PlayStation pays $50,000 bug bounty for PS5 issue

• According to the shared information, that is the maximum reward in the PlayStation bug bounty program.
• The recipient is named in the source as hacker 2tonejordy, who joked that it could pay for Grand Theft Auto 6.

What happened

According to multiple sources, Sony made a $50,000 payout through the PlayStation bug bounty program to a user who reported a security issue in the PlayStation 5. In the available information, this is described as a critical exploit or vulnerability, but the exact technical problem is not mentioned. The reporting therefore refers to a PS5 issue, but not to a firmware version, attack vector, or concrete technical details about the vulnerability itself.

The report was shared on social media by a user identified in the source as 2tonejordy. In the quoted post, the user says this would be the highest possible reward in the PlayStation bug bounty program. The same post also includes a joke that the amount would be enough to pay for Grand Theft Auto 6. In the supplied text, that line is clearly presented as a joke rather than a serious purchase claim.

The available sources do not include a direct Sony statement in the supplied text, but they do refer to the PlayStation program on HackerOne, where security researchers can submit vulnerabilities. The external context also mentions Secure@Sony as a broader reporting channel for Sony security issues, although this report focuses mainly on the PlayStation bounty program. The core of the story remains that a PS5 security issue reportedly led to a maximum bounty payout of $50,000.

Background

The PlayStation bug bounty program runs through HackerOne and is designed to let security researchers report vulnerabilities before they can be exploited. In the supplied context, Secure@Sony is also mentioned as a broader Sony program for reporting security issues. HackerOne describes the PlayStation program as a way to tap the hacker community to help make PlayStation safer. That fits the usual structure of bug bounty programs: researchers report an issue, the company assesses the impact, and a reward is paid out.

The sources do not spell out the exact reward structure in the supplied text, beyond describing the $50,000 payout as the maximum reward. It also remains unclear which PS5 vulnerability was reported and whether Sony explicitly confirmed it in the materials provided. The available information does say it was a critical exploit, but without technical detail in the text itself. For that reason, it is best to keep the claim limited to a reported bounty payout for a PS5 security issue.

The external context shows that several publications refer to the same amount and the same name. Game Rant says a hacker named 2tonejordy posted on Twitter that he received the maximum award in the PlayStation bug bounty program. Dexerto likewise describes a $50,000 payout for reporting a critical security vulnerability and includes the same GTA 6 joke. Another source in the context, Gadget Review, also calls it a $50,000 payment for a critical PS5 vulnerability. Those overlaps strengthen the impression that the coverage is about the same bounty payout, even if the exact technical details of the bug are not disclosed.

Sources

• Game Rant: "PlayStation Just Paid a User $50,000"
• Dexerto: "PlayStation pays user $50,000 bounty for reporting ..."
• HackerOne: PlayStation Bug Bounty Program