If we can't break it, it's yours.
Think you're unhackable? Point our agents at your app. If they can't find a high-severity vulnerability, a 2026 Porsche 911 Carrera is yours.
Entries open online August 7–9 · Booth 8408, August 4–6
How it works
- 01
Enter August 7–9
Two minutes at verialabs.com/challenge, one entry per org. At the show? Swing by booth 8408 and we'll ping you when entries open.
- 02
We try to break in
Once eligibility is confirmed, our agents go to work. Slots go in order of entry.
- 03
No high-severity finding? You win
Your assessment stands on its own. Take a 2026 Porsche 911 Carrera or $129,950 cash.
This challenge is offered solely by Veria Labs and is not sponsored, endorsed, administered by, or associated with Black Hat or Informa.
Why we'd bet a Porsche
Veria AI is an autonomous pentester: it maps your entire attack surface, proves real exploits, and drafts the fix. We think it finds what other assessments miss, and we'd rather put Porsches on the line than claim it in a brochure.
So the bet is simple. If we find something serious, you learn exactly where you're exposed. If we don't, the keys are yours.
See what Veria doesWhat we've found
- Pydantic They offered $5,000 to anyone who could escape Monty, their Rust sandbox. We chained two GC bugs into a use-after-free.
- Aleo A weak Fiat-Shamir transcript allowed arbitrary transaction forgery. $65,000 bounty.
- a16z Missing Dory commitments in Jolt, their zkVM, allowed full proof forgery.
- Block A one-click RCE in Goose: any site you visited could run commands on your machine.
“We paid roughly 6 figures for an audit from a top security firm. Veria costs us significantly less and found the same bugs and more.”
- Prize: one (1) new 2026 Porsche 911 Carrera coupe, base specification, or $129,950 cash, at the winner's election. Approximate Retail Value: $129,950. Up to ten (10) prizes will be awarded, one per assessment slot.
- Ten (10) assessment slots, allocated in order of entry receipt. Additional eligible entries are waitlisted.
- Outcomes are determined solely by skill, as defined in the Official Rules: whether the assessment identifies a high-severity security vulnerability (CVSS 4.0 score of 7.0 or higher). No outcome involves chance.
- Eligibility summary: organizations with more than 50 employees that commercially operate substantial proprietary software. Cybersecurity companies are not eligible. Entrants must own the application and be authorized to grant full source-code access. Blockchain applications must not have had a prior third-party audit.
- Entry is free and online only, at verialabs.com/challenge. No purchase, payment, or event attendance is required to enter or win. The entry period opens August 7, 2026 at 12:01 a.m. Pacific Time and closes August 9, 2026 at 11:59 p.m. Pacific Time. Event attendees receive no priority or preferential treatment.
- Prizes are taxable income to the winning organization, which is solely responsible for all federal, state, and local taxes. Veria Labs will issue an IRS Form 1099. The tax liability may be substantial; consult a tax professional before accepting a prize.
- The challenge is offered, administered, and fulfilled solely by Veria Labs, Inc., 2261 Market St STE 85941, San Francisco, CA 94114. It is not sponsored, endorsed, or administered by, or associated with, Black Hat, Informa PLC, Porsche AG, or Porsche Cars North America.