News
Tesla cybersecurity measures fail, hackers win Model 3 at hacking event
Tesla has been hacked at the Pwn2Own hacking event, and the hacking group has taken home a Tesla Model 3 and $100,000.
As electric vehicles and their significant amount of integrated software have become more common in everyday life, the security around them has become significantly more critical. In the worst-case scenario, a hacker could not only gain access to a car but could leak user data or even take control of the vehicle. Now, at the Pwn2Own hacking competition, a group of hackers successfully hacked a Tesla Model 3 and won the vehicle along with a $100,000 prize.
The successful hack completed by the group Synactiv was initially reported by the Zero Day Initiative Twitter account, revealing that the group had used a TOCTOU exploit to gain access to the vehicle.
One of the main highlights from Day One of #Pwn2Own Vancouver 2023: @Synacktiv vs the Tesla Model 3. Their successful demonstration earned them $100,000 and the car itself pic.twitter.com/d7TY5mKHxK
— Zero Day Initiative (@thezdi) March 23, 2023
CONFIRMED! @Synacktiv successfully executed a TOCTOU exploit against Tesla – Gateway. They earn $100,000 as well as 10 Master of Pwn points and this Tesla Model 3. #Pwn2Own #P2OVancouver pic.twitter.com/W61NasJPAl
— Zero Day Initiative (@thezdi) March 22, 2023
Thanks to the nature of the hacking competition, the details of how the hack was performed have not been made entirely public to avoid a security risk for Tesla owners. Still, the method the hackers used was relatively straightforward.
The TOCTOU (Time-Of-Check Time-Of-Use) exploit involves altering internal files to gain system access. In essence, the hackers are altering the files that a system will check to ensure someone actually should have access. This could, for example, involve changing login credentials to allow yourself access. However, as the name suggests, this is highly time-dependent, as it involves using the discrepancy of time between the system checking the files and a person actually being logged in.
Pwn2Own is one of the most famous hacking events in the world. It involves teams of hackers attempting to gain access to some of the most popular software available on the market. Each group of hackers and security researchers will be given a list of devices and software and a series of objectives to achieve. The first team to navigate through the list gains a cash prize. In this case, for completing this step of the competition quickest, the Synactive team won the Tesla Model 3 that they hacked.
With software becoming ever more interconnected with the vehicles we drive, focusing on keeping that software secure will only become more important as time passes. And with the increasing interconnectedness of these car systems, the consequences of not keeping these systems secure will only become more dire. Hopefully, automakers will take this threat seriously and continue to work to keep their items as safe and secure as possible.
What do you think of the article? Do you have any comments, questions, or concerns? Shoot me an email at william@teslarati.com. You can also reach me on Twitter @WilliamWritin. If you have news tips, email us at tips@teslarati.com!
Tesla just gave what is perhaps its biggest signal yet that the launch of the Cybercab, its autonomous ride-hailing-geared car, is imminent.
The Cybercab has been spotted outside of Gigafactory Texas in massive numbers over the past few days, with hundreds of units being stored on property just days after the vehicle received a Certificate of Conformity from the EPA.
Today, things were a bit different.
Cybercabs spotted on Giga Texas property today had an addition: a Cybercab decal on the side, reminiscent of the “Robotaxi” ones that were placed on Model Ys just as the company launched its ride-sharing platform about a year ago.
Giga Texas drone operator Joe Tegtmeyer noticed the change today:
Tesla Cybercabs are now getting “Cybercab” logos on the side of them!
Tesla did the same with Model Ys that were given “Robotaxi” logos: https://t.co/DanANtw1m7 pic.twitter.com/FqOhH0S9Ks
— TESLARATI (@Teslarati) June 19, 2026
Tesla could be signaling that the Cybercab is preparing to enter the Robotaxi fleet in the coming weeks or months with this move. It seems more symbolic than anything; Tesla is ready to throw Cybercabs in the ride-hailing platform just as it did with Model Ys last year.
The addition of the Certificate of Conformity awarded to the Cybercab is another major factor working to Tesla’s advantage. The company now has permission from the EPA to allow the vehicle to operate on public roads and enter the chain of commerce. It’s officially street legal.
Tesla Cybercab specs revealed: range, curb weight, range ratings, and more
The big question that remains is whether Tesla will be able to operate the car without a safety monitor, especially considering it plans to put the car out there without a steering wheel or pedals. With the Cybercab only having a seating capacity of two, it is hard to believe Tesla will even consider putting a Safety Monitor in the car.
It did recently self-certify as Level 4 and has the ability to operate driverless vehicles in the State of Texas under a law that took effect on May 28. You can read more about that here:
Tesla’s Robotaxi dreams just took a massive step toward reality
We’d imagine Cybercabs will be on the roads as soon as July, but August will likely be a better estimate of when the car will be entered into the Cybercab fleet. It all depends at where Tesla is, as they’ve truly prioritized safety with the rollout of the Robotaxi platform.
Elon Musk has publicly questioned Moody’s credit assessments following the rating agency’s decision to assign SpaceX a Baa1 investment-grade rating, two notches above Tesla’s Baa3. The comments came amid discussions comparing the two companies’ financial profiles.
SpaceX earned its first-time Baa1 rating with a stable outlook from Moody’s. The agency highlighted the company’s leadership in orbital launches, the growing recurring revenue from its Starlink satellite network, strong vertical integration, U.S. government contracts, and emerging opportunities in AI infrastructure.
These factors were cited as supporting robust cash flows, margin expansion, and financial flexibility.
Musk responded directly: “Tesla’s credit rating is ridiculously low tbh,” and added, “Yeah, makes no sense. Tesla has over $40B in cash, no debt, and is consistently profitable!” His remarks underscored Tesla’s balance sheet strength and profitability at a time when many traditional automakers continue to report losses in the shift to electric vehicles.
Yeah, makes no sense.
Tesla has over $40B in cash, no debt and is consistently profitable!
— Elon Musk (@elonmusk) June 19, 2026
Tesla maintains a leading position in the global EV market, with diversification into energy and storage, battery technology, and robotics through projects like Optimus. Recent financial updates show the company generated positive free cash flow of $1.4 billion in Q1 2026, supported by operating cash flow of $3.9 billion. Cash and short-term investments stood at approximately $44.7 billion.
Moody’s has affirmed Tesla’s Baa3 issuer rating with a stable outlook in periodic reviews, acknowledging the company’s EV leadership, technology strengths, including AI for autonomous vehicles, solid profitability, and strong liquidity.
Tesla (TSLA) scores Baa3 Moody’s rating for ‘stable’ outlook
However, the agency has also noted challenges in the automotive segment and expectations for margin pressures.
Musk’s critique highlights a common debate about how traditional rating methodologies apply to high-growth, capital-intensive technology companies. SpaceX benefits from long-term government-backed contracts and diversified, recurring revenue streams, while Tesla’s valuation reflects heavy investment in future technologies such as autonomy and robotics.
Both ratings remain investment-grade, yet the one-notch difference has fueled online discussion about potential inconsistencies in evaluating innovative firms.
The exchange comes as SpaceX explores financing options following its recent valuation milestones, while Tesla continues executing on its multi-year roadmap. Musk’s pointed response serves as a reminder that credit ratings, though influential for borrowing costs, represent one lens through which markets assess corporate strength—and that company leaders often view their financial positions through the lens of long-term innovation and cash generation rather than short-term risk metrics alone.
A new report from Reuters claims that a transport authority in Sweden is pushing back against the approval of Tesla’s Full Self-Driving suite because it will travel over speed limits.
The report says the Swedish Transport Administration (TRV) recommends the European Union votes against FSD’s approval. TRV believes it should not be approved until Tesla disables FSD’s ability to speed.
TRV sent a letter to the European Union’s Technical Committee on Motor Vehicles (TCMV), which is set to meet on June 30 to discuss the potential approval of the Tesla FSD suite in the country. Tesla, which has received various approvals in Europe over the past two months, has not provided a comment.
Teslas operating on FSD do travel over the speed limit, depending on the Speed Profile that is chosen. Drivers have the ability to disengage FSD at any point; Tesla specifically states that those supervising the suite are responsible for its actions.
Let’s cut to the chase: humans operating any vehicle speed almost daily in the United States. Realistically, speed limits in the U.S. are more frequently treated as speed minimums. However, other countries are different, and driving behaviors are less aggressive.
TRV believes that “allowing automated systems to systematically exceed legal speed limits…risks undermining both the legal framework and the expected safety benefits of vehicle automation,” the report stated. It’s surprising that Tesla has not received this claim from other countries previously.
This could be a good argument to bring Max Speed back, the setting that previously allowed the driver to choose the absolute fastest the car would travel.
This would still put the responsibility of supervision in the hands of the driver. It would allow the driver to choose whether the car would travel over the speed limit or not, acknowledging that they set the speed, and if they get pulled over, there would be no ability to argue it.
However, it does not seem as if this is something Tesla will do, especially considering many U.S. drivers have requested the feature in an effort to eliminate speeding or at least tone it down. The company has not shown any interest in bringing it back.
Tesla has approvals for FSD in Europe in Estonia, Lithuania, Denmark, the Netherlands, and Belgium.
Tesla gives its biggest signal yet that Cybercab launch is imminent
Elon Musk challenges Tesla credit rating from Moody’s after SpaceX gets a higher one
