UAE Startup Offers $20M to Hack Any Smartphone

A newly launched cybersecurity company in the United Arab Emirates, Advanced Security Solutions, has announced a program offering up to $20 million for zero-day exploits—software vulnerabilities that can hack smartphones through text messages. The company positions itself as one of the highest-paying buyers in the zero-day market.

Zero-day exploits are flaws in software that developers are unaware of when discovered. These vulnerabilities allow controlled access to devices before security patches are released, making them valuable for government agencies, law enforcement, and intelligence operations.

Key highlights of the program:

• $20 million bounty for any mobile operating system zero-day

• $15 million for iOS or Android exploits

• $10 million for Windows vulnerabilities

• $5 million for Chrome, $1 million for Safari and Microsoft Edge

• $2 million for messaging apps, including Signal, Telegram, and WhatsApp

• Works with over 25 government and intelligence agencies worldwide

• Staff reportedly have 20+ years of experience in elite intelligence and private military operations

• Ownership and leadership remain undisclosed, and the company has not shared funding sources

Experts familiar with zero-day markets say the payouts are among the highest publicly offered. They note that these high values reflect increasing demand for mobile vulnerabilities. However, working with undisclosed buyers carries potential legal and ethical risks that researchers must carefully consider.

The zero-day market has expanded considerably over the past decade, both in the number of participants and the value of individual exploits. Hacking modern devices has become more challenging due to stronger security measures, which has driven up the market price for critical vulnerabilities. By offering high payouts across multiple platforms and messaging apps, Advanced Security Solutions signals a major escalation in the market for mobile security exploits.

“This program shows that governments and agencies are now investing millions to access mobile vulnerabilities, creating higher stakes for cybersecurity professionals and device protection efforts,” said a security analyst familiar with zero-day markets. “Researchers must navigate ethical and legal boundaries carefully, while companies need to patch devices faster than ever to protect sensitive information.”

Also Read: TinyFish Secures $47 Million Series A for AI Web Agents