Sony pays $50,000 to reporter of serious PlayStation vulnerability, specific vulnerability not yet disclosed

Summary:

Sony paid security researcher Jody $50,000 for reporting a serious vulnerability in PlayStation products. The vulnerability is listed as the highest severity level, but the public information does not specify the specific method of exploitation, nor does it indicate which product or service is involved.

Jordy uses the name "2tonejordy" on HackerOne. He talked about the bonus on his X account and joked that the money was at least enough to buy "GTA6/Grand Theft Auto 6."

Sony runs a bug bounty program through HackerOne. Researchers submit security issues privately, and Sony then has time to investigate and fix them; bounty amounts are related to the severity of the vulnerability.

Jordy received attention in September 2026 for reporting a PlayStation 5 hypervisor vulnerability. At the time, another researcher was working on Linux support for the console, and the two disagreed over the timing of the report. There is currently no evidence that the $50,000 reward corresponds to the vulnerability in September.