News
Tesla cybersecurity measures fail, hackers win Model 3 at hacking event
Tesla has been hacked at the Pwn2Own hacking event, and the hacking group has taken home a Tesla Model 3 and $100,000.
As electric vehicles and their significant amount of integrated software have become more common in everyday life, the security around them has become significantly more critical. In the worst-case scenario, a hacker could not only gain access to a car but could leak user data or even take control of the vehicle. Now, at the Pwn2Own hacking competition, a group of hackers successfully hacked a Tesla Model 3 and won the vehicle along with a $100,000 prize.
The successful hack completed by the group Synactiv was initially reported by the Zero Day Initiative Twitter account, revealing that the group had used a TOCTOU exploit to gain access to the vehicle.
One of the main highlights from Day One of #Pwn2Own Vancouver 2023: @Synacktiv vs the Tesla Model 3. Their successful demonstration earned them $100,000 and the car itself pic.twitter.com/d7TY5mKHxK
— Zero Day Initiative (@thezdi) March 23, 2023
CONFIRMED! @Synacktiv successfully executed a TOCTOU exploit against Tesla – Gateway. They earn $100,000 as well as 10 Master of Pwn points and this Tesla Model 3. #Pwn2Own #P2OVancouver pic.twitter.com/W61NasJPAl
— Zero Day Initiative (@thezdi) March 22, 2023
-
Thanks to the nature of the hacking competition, the details of how the hack was performed have not been made entirely public to avoid a security risk for Tesla owners. Still, the method the hackers used was relatively straightforward.
The TOCTOU (Time-Of-Check Time-Of-Use) exploit involves altering internal files to gain system access. In essence, the hackers are altering the files that a system will check to ensure someone actually should have access. This could, for example, involve changing login credentials to allow yourself access. However, as the name suggests, this is highly time-dependent, as it involves using the discrepancy of time between the system checking the files and a person actually being logged in.
Pwn2Own is one of the most famous hacking events in the world. It involves teams of hackers attempting to gain access to some of the most popular software available on the market. Each group of hackers and security researchers will be given a list of devices and software and a series of objectives to achieve. The first team to navigate through the list gains a cash prize. In this case, for completing this step of the competition quickest, the Synactive team won the Tesla Model 3 that they hacked.
With software becoming ever more interconnected with the vehicles we drive, focusing on keeping that software secure will only become more important as time passes. And with the increasing interconnectedness of these car systems, the consequences of not keeping these systems secure will only become more dire. Hopefully, automakers will take this threat seriously and continue to work to keep their items as safe and secure as possible.
What do you think of the article? Do you have any comments, questions, or concerns? Shoot me an email at william@teslarati.com. You can also reach me on Twitter @WilliamWritin. If you have news tips, email us at tips@teslarati.com!
Elon Musk continues to tease the unveiling event for the Tesla Roadster, a continuing trend that has grown into a bigger game of “When” for fans who have been waiting years for the car to finally enter production.
A video shared on X of the Joe Rogan Experience podcast that Musk appeared on last year, teasing the Roadster unveiling, was shared once again on the social media platform. The poster said the Roadster event will be “unforgettable.”
Musk agreed:
Yes
— Elon Musk (@elonmusk) August 12, 2026
The timing is interesting because just yesterday, Musk said that we will be getting flying cars, and for years, Tesla has hinted that it could develop a SpaceX cold gas thruster package that would help the car float or fly for a short period of time.
It would be reasonable to assume Tesla’s major delays with this unveiling event are likely caused by the company’s need to break the rules and push the envelope on nearly everything. Last July, Lars Moravy, Tesla’s VP of Vehicle Engineering, said:
-
“Roadster is definitely in development. We did talk about it last Sunday night. We are gearing up for a super cool demo. It’s going to be mind blowing. We showed Elon some cool demos last week of the tech we’ve been working on and he got a little excited.”
The latest updates that Tesla has given us are that the Roadster is in design development, and it did have several potential dates for an unveiling event this year, including April. It was then pushed to August.
However, there are no clues as to when Tesla will be ready, and fans are certainly getting frustrated with the delays.
For what it is worth, Franz von Holzhausen told Jay Leno this week that the event would be “very soon.”
We sure hope.
Lifestyle
Tesla’s driverless Cybercab just passed a big test with State Governor
Florida’s governor rode Tesla’s Cybercab at a closed test track and called the experience impressive.
Florida Governor Ron DeSantis rode in a Tesla Cybercab on a closed test track this week and came away impressed, posting on X that the vehicle “successfully navigated all hazards — a kid running into the street, a crash with police stopping traffic, a Model S cutting us off, etc.” He called the ride “impressive.”
The stop was part of a broader event Monday at SunTrax, a 775 acre state owned proving ground in Auburndale that Florida built specifically to test autonomous and connected vehicles before they reach public roads. Standing next to a gold Cybercab, DeSantis described the car in plain terms: “You go in there and you just sit. You have a screen. There’s no steering wheel, no pedals. Clearly these things could be very beneficial.”
We took a ride on a robotaxi on the Suntrax course and it successfully navigated all hazards — a kid running into the street, a crash with police stopping traffic, a Model S cutting us off, etc.
Impressive! https://t.co/FVAkzFLz3r
— Ron DeSantis (@RonDeSantis) August 11, 2026
DeSantis paired the praise with a caveat that has followed autonomous vehicles since the category existed. “You don’t want to be in an autonomous vehicle and it drives you into a ditch. That would not be good,” he said, framing safety validation as the gate before wider deployment.
SunTrax, the 2.25 mile oval which the state calls the only high speed autonomous vehicle test track in the Southeast, can simulate rain, pedestrian crossings, hills and crowded urban conditions at highway speeds, letting companies push a car past what an early public rollout would risk. Tesla, Waymo and Beep all use the facility, and Florida’s regulatory approach, among the most permissive for autonomous vehicles in the country, doesn’t require a human operator inside a fully autonomous car.
-
Tesla has reason to want the blessing of Florida and states beyond, as the Cybercab entered volume production at Gigafactory Texas this spring and has since self certified as SAE Level 4 under Texas law. Public road testing so far has kept a safety monitor in the passenger seat, and Florida is where Tesla has been expanding its existing Model Y based Robotaxi service instead, adding Miami in July and then Orlando and Tampa two weeks later. A closed track endorsement from a sitting governor doesn’t change any of that, but it does put Tesla’s newest hardware in front of a state that has already shown it will move fast on rules.
Sweden’s IF Metall union has announced that it is ending all protests against Tesla, effective immediately.
The union said in a statement this morning:
“There seems to be no limits to the length Tesla would go to keep unions out of their operations. Unfortunately, they have managed to pay their way out in Sweden. At least that has given the former IF Metall members more money in their pocket, but the insecurity of not having a union or a collective agreement still remains.”
IF Metall has been after Tesla in Sweden for the past three years, attempting to push unionized operations into its factories. Tesla, on the other hand, has given its employees the chance to unionize in various markets. However, the organization says that Tesla has “bought out all of its striking members.”
🚨 NEW: IF Metall has decided to end all industrial action against Tesla in Sweden, effective immediately.
“IF Metall has decided to end all industrial action against Tesla’s Swedish operations, after the company bought out all of its striking members. With no members remaining… pic.twitter.com/blne8iC6hV
— TESLARATI (@Teslarati) August 13, 2026
-
“Today, we end our industrial action against Tesla. We do so because it can no longer have an effect – not because our principles have changed,” a written statement said.
Over the past three years, IF Metall has definitely been a thorn in the side of Tesla and its operations in Sweden. The primary strike started in October 2023, when IF Metall members at Tesla’s Swedish Service Centers refused to work.
IF Metall chair to Elon Musk: “Give us a chance” as Tesla Sweden strike hits 2 years
Strikes extended to blockades and work stoppages at non-Tesla-owned repair shops that service Teslas. This limited and stopped anything related to warranties, transport damage, and other work on Teslas ending, eliminating work arounds for customers.
Sympathy strikes followed, as postal workers, dock workers, electricians, and other tradesmen stopped working. Add in lawsuits and other pressures, and you get the full scope of what strategies the union has used against Tesla over the past several years.
But now, it’s all over.
“We will continue to defend the right of workers to organize. We will continue to fight for collective bargaining. And we will continue to stand in solidarity with workers and trade unions facing similar challenges elsewhere – just as you have stood with us,” IF Metall said.
-
Elon Musk teases Tesla Roadster unveiling once again
Tesla’s driverless Cybercab just passed a big test with State Governor
