A security researcher just scored a massive $250,000 from Google for uncovering a critical Google Chrome vulnerability that could have let hackers take over a user’s computer. The researcher, known as Micky, earned the record-breaking payout through Google’s Chrome Vulnerability Reward Program. The high-profile nature of the find shows how the aftermath of shocking digital events can have wide-reaching consequences. This discovery, tracked as CVE-2025-4609, exposed a serious flaw in Chrome’s internal communication system, prompting Google to act fast.
The flaw was found in Chrome’s Mojo system, a tool that helps different parts of the browser talk to each other securely. Micky discovered a complex error that allowed a malicious website to bypass Chrome’s sandbox protection, a key security feature that keeps harmful code from reaching your device. By exploiting this bug, attackers could potentially run harmful code and gain full control of a user’s system.
Micky’s detailed report and working proof-of-concept showed how this could happen with a 70-80% success rate, making it a high-priority issue. Google patched the vulnerability in Chrome version 136, released in mid-May 2025, ensuring users were protected before details went public. The fix was also applied to other browsers, like Edge and Brave, that use Chrome’s technology.
The $250,000 reward, the highest ever for a Chrome bug, reflects the seriousness of the flaw and Micky’s thorough work in demonstrating its impact. This payout is part of Google’s ongoing effort to encourage researchers to find and report security issues, with the company boosting its reward amounts in August 2024 to attract top talent. This isn’t the first time Chrome’s Mojo system has been targeted.
A similar flaw, CVE-2025-2783, was exploited by hackers earlier in 2025, raising ongoing concerns about the complexity of securing modern browsers. With Chrome being one of the world’s most-used browsers, another unpatched Google Chrome vulnerability like this could put millions at risk. Google’s quick response and hefty reward show how seriously the company takes these threats.
Ethical hacking is proving more vital than ever as browsers face increasingly sophisticated attacks. Micky’s discovery earned a massive payday and helped protect users worldwide.
