Last year, Tesla made headlines when it made a Mid-Range Model 3 RWD a target and prize at a Pwn2Own hacking competition. Two hackers participating at the event were able to find a vulnerability with the Model 3’s browser, allowing them to win the vehicle and over $350,000 in prize money. But Tesla is a company that never stays still, so this year, the electric car maker is returning to an upcoming Pwn2Own event this March, armed with a much more secure Model 3 and a bigger cash reward.
This time around, Tesla is offering three tiers of prizes for hackers who can find vulnerabilities in the Model 3. Hackers who wish to claim the highest “Tier 1” prize would need to pivot through multiple systems in the car to find vulnerabilities. But if they are successful, they will win the Model 3 and a $500,000 prize. But that’s not all. Contestants can also aim to acquire additional options to increase the cash prize to $700,000.
In a statement to Forbes, a spokesperson from Trend Micro ZDI explained that Tesla’s challenge this year is incredibly tough, but it also comes with a record-setting reward. “This represents the single largest target in Pwn2Own history. If someone can do this, it would also mean 70 total Master of Pwn points, which is nearly insurmountable,” the spokesperson said. “We wanted to include Tesla because they pioneered the concept of a connected car and over-the-air updates for their entire vehicle fleet nearly a decade ago, and have been leading the space ever since.”
Just like last year, Tesla will be joining other tech companies at the upcoming Pwn2Own event. While Tesla appears to be the only automaker that is willing to test its vehicles’ security against the best white hat hackers in the industry, other mainstream tech companies are also allowing their key products to be targets for the competition. Google’s Chrome, Microsoft’s Edge, Apple’s Safari, and Mozilla’s Firefox web browsers, for example, are all targets this time around for the Web Browser category. At the same time, Microsoft’s Office 365 Plus and Adobe Reader are the targets for the Enterprise Applications category.
Tesla’s participation in events such as Pwn2Own highlights the company’s Silicon Valley roots. The company’s electric vehicles usually dominate the news cycle, resulting in Tesla being commonly dubbed as a carmaker. But the company is far beyond that, as it is, at its core, a tech firm. This is one of the reasons why Teslas are so different from any other vehicle on the road. Its vehicles are equipped with proprietary software and hardware that provides something akin to an Apple-like experience for customers.
This distinction is something that Tesla had emphasized since 2014, when the company broke conventions by launching its Bug Bounty program. By doing so, Tesla practically invited white hat hackers to find security faults in its vehicles. Tesla’s efforts have largely borne fruit, with several security features today, such as PIN-to-Drive, being developed as a result of the company’s Bug Bounty program.
The upcoming Pwn2Own event will be held at the CanSecWest conference, which is scheduled to run from March 18-20, 2020.
Elon Musk
Tesla Roadster owners to get “Flying Stunt Mode” and looping track access
Musk says Roadster owners can command the unveiling stunts autonomously, with a Texas looping track.
Elon Musk says owners of the new Tesla Roadster will be able to ask the car to perform the stunts Tesla showed at its unveiling, with the car doing the driving itself. Musk made the comment Saturday in a reply on X to tech blogger Robert Scoble, and he added a promise of a looping track at Tesla’s Texas headquarters.
Scoble had argued that the person in the Roadster is not really driving it. In his description, the driver operates a computer that tells another computer what to do, with steering, braking and acceleration all handled by wire. Musk answered, “True. You will be able to ask the Roadster to perform any of the tricks shown autonomously, as it will be sentient. Also, we will have a wild looping track (crazier even than Hot Wheels) at our Texas HQ where you can test out your Roadster.”
@Scobleizer True.
You will be able to ask the Roadster to perform any of the tricks shown autonomously, as it will be sentient.
Also, we will have a wild looping track (crazier even than Hot Wheels) at our Texas HQ where you can test out your Roadster.
— Elon Musk (@elonmusk) October 17, 2026
At the October 15 event outside Waco, the car drove up a curved ramp until it was upside down, flew off on cold gas thrusters, flipped and landed. It also hovered over a Cybercab, Cybertruck, Semi, Model Y and Model 3 while moving. As we noted in our breakdown of the three Roadster configurations, Musk said at the event that the car “literally is just going to puff itself up” to perform the maneuvers whenever an owner wants. Saturday’s reply adds that the car would run them on its own.
Tesla has described some of the hardware that would make that possible. The Roadster uses steer by wire with a yoke, and its cold gas thrusters rely on electric actuators for small adjustments in flight. A fan system under the car creates suction, which Tesla says is strong enough to hold it upside down, a setup we covered in our look at the Roadster’s fan system and thrusters.
Musk did not say when an autonomous stunt feature might arrive, how it would work, or what he means by sentient. He also gave no size, location or opening date for the Texas track. Production is planned for Giga Texas in 2027 or 2028, and Tesla says the car is not approved for public road use. The Rocket version, the one built to fly, is invite only.
The comment follows a week of Musk teasing the event, including his claim that the demo would be a banger, which we covered before the stream. Tesla reports third quarter earnings on October 21, and shareholders can submit and vote on questions through the Say portal until 4 p.m. EDT on October 20, according to our earnings Q&A preview. A question about autonomous Roadster stunts and the Texas track would be a quick way to get specifics from management.
Elon Musk
How to use Grok Bot to block spam calls and texts
Musk told users to ask Grok Bot to scrub their phone numbers from spam lists.
Elon Musk has a new use case for Grok Bot, and it is the spam call. On Thursday he replied to an X user named Arash with a short instruction: “Ask your @Grok @Bot to remove your phone number from spam call & text lists!” Arash had said he got tired of the calls, had an AI bot find his number on listing sites and file removal requests, and packaged the process as a free skill for others.
The skill is called Spam-Call Scrubber, which is described to find a phone number on people search sites and data brokers, submits the opt outs, completes the confirmation emails those sites send back, and rechecks on a schedule the user picks. Using it requires the Grok Bot app. The pitch is time saved, since most broker opt outs sit behind separate forms on separate sites.
Ask your @Grok @Bot to remove your phone number from spam call & text lists!
— Elon Musk (@elonmusk) October 15, 2026
Musk said Grok Bot now gives each bot its own email address, and that it can detect scam emails. On Thursday he also said SpaceX would make users whole if the bot botches a purchase or leaks a card, then told users to shop away from Amazon after the retailer blocked the agent, as Teslarati reported. The terms of service we reviewed at the time put responsibility for what an agent does on the user.
For Tesla owners, Grok Bot is not just a phone app. Tesla brought Grok Bot into its vehicles on September 22, and we argued earlier this week that the Cybercab’s real advantage may be the errands it runs during a ride. Every Cybercab and the rest of the Model Y Robotaxi fleet has it enabled. The more routine tasks like this one become, the more a rider has reason to hand over something personal in the back seat.
The new Spam-Call Scrubber skill can be downloaded for free and works on sites that honor removal requests, while noting that listings can reappear, and illegal robocallers do not check any registry. Whether Spam-Call Scrubber cuts anyone’s call volume is something the first wave of users will find out, and Musk’s endorsement guarantees that wave is coming.
Investor's Corner
Tesla’s flying Roadster just revealed something bigger than the car
Analysts say the Roadster demo puts a Tesla and SpaceX merger back on the table.
The Roadster unveiling near Waco ended Thursday night, and by Friday morning much of the investor reaction had less to do with the car than with who owns the rocket technology inside it.
Wedbush analyst Dan Ives said the event “puts the Tesla/SpaceX relationship on the table in a tangible way,” pointing to the propulsion, pressure vessel and control hardware sitting on a Tesla product. Gene Munster of Deepwater Asset Management called the demo “a ridiculous display of engineering” with “no commercial value” beyond embarrassing traditional automakers, though he said it showed Musk wants the two companies together.
The more specific forecast came a day earlier from Barclays. Analyst Dan Levy told clients a deal could be announced before Tesla’s annual meeting, which must happen by December 6, and that an announcement in late October or early November could make shareholder approval harder. Barclays expects SpaceX to be the buyer in an all stock deal, with Tesla holders receiving SpaceX shares at a premium, based on market values of roughly $2.1 trillion for SpaceX and $1.5 trillion for Tesla. If nothing lands around the meeting, the bank still sees an announcement within 6 to 12 months.
The Roadster demo just added more weight to merger speculations. Tesla’s demo used cold gas thrusters and pressure tanks of the kind SpaceX uses on Falcon 9, and Musk described the car as a collaboration between Tesla and SpaceX engineers, as we mentioned in our breakdown of the three Roadster configurations.
Musk has not publicly addressed a deal since the event, as far as we have seen. His most direct answer remains the one he gave at the All In Summit, when he said that with so much collaboration, “who can imagine what action one might take” without ruling anything out. Ives has held to a 2027 timeline since his March note, and Musk pushed back on the China piece of the speculation when ARK floated a year end announcement in August.
The next test is Tesla’s third quarter earnings call on October 21. However, we recall in July that Musk told analysts, “we can’t talk about combining companies and that kind of thing on an earnings call,” so a clear answer wouldn’t be expected.