Hacker Gets $30K Reward for Robot Vacuum Security Find

When Sammy Azdoufal tried to control his DJI robot vacuum with a PlayStation controller, he stumbled onto something unexpected: access to 7,000 other robots that could peek into strangers' homes.

Now, DJI is rewarding him with $30,000 for helping make their products safer. It's a win that shows companies can do the right thing when security researchers come forward.

Azdoufal wasn't trying to break into anything. He was simply tinkering with his own robot vacuum on Valentine's Day when he discovered the security flaw. Instead of exploiting it, he reported what he found to The Verge and worked with DJI to fix the problem.

The reward matters for more than just the money. Back in 2017, DJI had a rocky relationship with security researcher Kevin Finisterre, leaving many wondering if the company would treat ethical hackers fairly. This payout signals a different approach.

Hacker Gets $30K Reward for Robot Vacuum Security Find

DJI has already fixed the vulnerability that let people view robot video streams without needing a security PIN. The company confirmed the patch went live by late February, protecting thousands of users who never knew they were at risk.

The company is also working on addressing an even more serious vulnerability that The Verge considered too dangerous to describe publicly. DJI spokesperson Daisy Kong confirmed they've started upgrading their entire system to close the remaining gaps.

The Bright Side

This story shows the security community working exactly as it should. A curious person found a problem, reported it responsibly, and got rewarded while users got protected. That's a better outcome than the alternative where vulnerabilities stay hidden until someone with bad intentions finds them first.

The $30,000 reward also sends a clear message to other security researchers: companies are listening, and doing the right thing can pay off. More eyes looking for problems means safer products for everyone.

Every robot vacuum owner can sleep a little easier knowing someone was looking out for them, even accidentally.