Companies reward cybersecurity researchers

Several companies pay cybersecurity researchers to report vulnerabilities in their products, with amounts reaching tens of thousands of US dollars. This practice encourages the identification of security flaws before they can be exploited by malicious actors.

Sony offers high rewards for critical issues

Sony, through the platform HackerOne, offers between 250 and 50,000 dollars (approximately 220 to 44,600 euros) depending on the severity of the vulnerability, the targeted device, and the range from "low" to "critical." On October 14, a researcher known as "2tonejordy" earned the maximum reward of 50,000 dollars for identifying a critical vulnerability in the PlayStation 5.

Mixed public reaction to the reward

The discovery has sparked mixed reactions online, with some expressing disapproval, suggesting that the reward may have come at a personal cost. Comments such as "50k in the bank account and zero remaining friends. Was it worth it?" and "It's worse than selling crack" reflect the negative sentiment. However, defenders of Jordy argue that his actions contribute to improving security.

Sony tightens security after the report

Sony has not disclosed specific details about the vulnerability found this week but has tightened security measures for PlayStation consoles. Version 14.10 of the system software, released on October 1, is now required to access the PlayStation Network and to play GTA 6, according to data from the PlayStation Store.

Jordy has a history of similar discoveries

Jordy is not new to such discoveries. Earlier in 2026, modder Andy Nguyen, known as theflow0, developed a tool to turn the PS5 into a PC under Linux, but it only worked on the first model of PS5 and with versions 3.xx to 6.02 of the system software. Nguyen later found a new vulnerability in the hypervisor of the PS5, which he hoped would allow his tool to work on more PS5s, including recently updated models.

Vulnerability discovery affects ongoing projects

On September 15, a researcher discovered the same vulnerability and reported it to PlayStation via HackerOne. Disgusted by the revelation, Nguyen announced the end of his work on PS5 Linux. The researcher who reported the vulnerability was identified as Jordy. Nguyen had initially asked Jordy not to disclose the vulnerability, but after learning that a third person had also discovered it, Jordy decided to report it to avoid being overtaken and to claim the reward. Sony has not confirmed whether the 50,000 dollar reward given this month was for the September report or another vulnerability.