Tesla Model 3 Hacked at Pwn2Own 2023: Synacktiv Wins $100,000 and a Tesla

March 27, 2023

By Kevin Armstrong

The Synacktiv team wins $100,000 and a Model 3 at Pwn2Own

@thezdi (Edited by NATA)

Tesla returned as a sponsor at the Pwn2Own 2023 event, offering cash prizes and cars to white-hat hackers who could uncover security vulnerabilities in their vehicles. The Synacktiv team, a security company based in France, took up the challenge, which successfully hacked a Tesla Model 3, earning them $100,000 and the vehicle as a prize.

Tesla Takes Cybersecurity Seriously at Pwn2Own Event

The annual Pwn2Own hacker contest is known for its high stakes, and Tesla's involvement in the event demonstrates the company's commitment to cybersecurity. This year, the electric vehicle (EV) manufacturer brought a Model 3 and a Model S as targets for hackers. Tesla offered a top prize of $600,000 plus the car to any individual or team who could display a complex exploit chain leading to a complete vehicle compromise.

Synacktiv Demonstrates Complex Exploit, Earning Top Prize

The Synacktiv team rose to the challenge, executing a Time of Check to Time of Use (TOCTOU) attack against the Tesla Energy Gateway. This type of cybersecurity vulnerability occurs when an attacker exploits the small-time window between a resource's check and use, allowing unauthorized access or modification of the resource during that brief period.

This is the second year in a row that Synacktiv has successfully demonstrated an exploit in a Tesla Model 3 at the Pwn2Own event. Last year, they managed to exploit the vehicle's infotainment system, but the complexity of the hack was not enough to win the car. This year, however, their successful TOCTOU attack earned them $100,000 and the Model 3 and 10 Master of Pwn points.

Event Highlights Vehicle Security in a Connected World

Tesla's participation in Pwn2Own highlights the importance of vehicle security as EVs become more connected and sophisticated. As technology advances, so does the need for robust security measures to protect drivers, passengers, and cars from potential cyberattacks.

Tesla recently released how the company collects and uses information about its owners and drivers. It also instructed owners on how to get information the company has and how to delete it.

By inviting white-hat hackers to test their vehicles' security systems, Tesla can gather valuable information about potential vulnerabilities and develop stronger defenses for their cars. This proactive approach to cybersecurity sets a positive example for the automotive industry and demonstrates Tesla's commitment to maintaining the highest level of safety for its customers.

Tesla Introduces Hands-Free Frunk Opening in Update 2024.32.3

September 7, 2024

By Karan Singh

Not a Tesla App

In Tesla’s upcoming update, 2024.32.3, Tesla has added hands-free support for opening the vehicle’s frunk. This follows the Spring Update (2024.14), which added Hands-Free Trunk support for certain vehicles.

When hands-free trunk support was added earlier this year, it was supported on vehicles that include an ultra wideband chip, which includes the refresh Model S, new Model X, and the 2024 Model 3. Due to the hardware requirement, these will be the same vehicles that support the new Hands-Free Frunk feature. Legacy vehicles without UWB will unfortunately not support either feature due to the hardware requirement. UWB enables far more accurate tracking of the phone key, allowing Tesla to pinpoint its exact location relative to the vehicle.

The Cybertruck interestingly also includes an ultra wideband chip, however, it didn’t include the automatic opening of the gate earlier this year. However, we expect the Cybertruck to also receive the hands-free frunk opening in this 2024.32.3 update or relatively soon afterward.

Update: The Cybertruck is receiving hands-free frunk support in the 2024.32 update as well.

Hands-Free Frunk

The Hands-Free Frunk works similarly to the trunk feature – with an iPhone 11+ and a recent version of the app, you’ll be able to stand in front of your vehicle, and the Frunk will unlatch after sounding a chime. On some vehicles, the frunk will immediately open after being unlatched, however, you’ll need to manually close it.

This new feature isn’t enabled by default – you’ll need to go to Settings > Locks > Hands-Free Frunk to enable it.

At this time, Tesla doesn’t support UWB on Android devices, though both the Hands-Free Trunk and Hands-Free Frunk support will come to Android users in a future app update, according to Tesla.

Exclude Home

With the addition of the hands-free frunk opening, Tesla has also added a new option. You can now choose to disable the automatic opening when your vehicle is located at home to prevent you from accidentally opening. This will apply to the automatic frunk and trunk. In addition, in the Model X, you’ll also be able to disable the self-presenting doors at home. This is a great addition as many people have kept the hands-free feature disabled due to it awkwardly opening in the garage.

In the 2024.32.3 update, Tesla also mentions that they’ve improved the detection of the phone key, which should make the feature more reliable and faster when approaching the vehicle from the front or rear.

Tesla’s Referral Program Launches in Europe

September 6, 2024

By Karan Singh

Not a Tesla App

Following its recent launch in the United States and Canada, Tesla has launched their referral program in several European countries as well.

The program is available in Germany, Norway, France, the Netherlands, the United Kingdom and possibly others. The program is almost the same as the one available today in North America, with rewards for each referral and a discount for those referred. The cap in Europe is also ten per year.

This program comes right on the heels of a 0% financing offer for the Model Y in Sweden and France. While referrals aren't currently available in Sweden, the 0% financing still is.

European Referrals

The European Referral program accounts for country and local currency, where applicable.

Country	Referral Discount	Referral Award
UK	£1,000	£500
Germany, France, Netherlands	€1,000	€500
Norway	kr11,500	kr5,750

The referral reward program is comparable to the one available in North America. After exchange rates, there is only an approximately 10% difference between the available rewards in the US and EU.

Other Countries

We expect this program to start rolling out to other European countries over the next few days or weeks, as Tesla continues to expand its referral program.