Sony paid security researcher Jordy $50,000 for reporting a critical vulnerability in a PlayStation product. The vulnerability was rated at the highest severity level, but public information has not yet disclosed the specific exploitation method, nor identified which product or service was affected.
Jordy uses the handle "2tonejordy" on HackerOne. He discussed this bounty on his X account, joking that the money would at least be enough to buy GTA VI.
Sony runs its vulnerability reward program through HackerOne. Researchers privately submit security issues, giving Sony time to investigate and fix them; bounty amounts are tied to the severity of the vulnerability.
Jordy previously drew attention in September 2026 for reporting a PlayStation 5 hypervisor vulnerability. At the time, another researcher was working on the console's Linux support, leading to a disagreement over the timing of the report. There is currently no evidence that this $50,000 bounty corresponds to the vulnerability reported in September.