Taiwan’s Orange Tsai Wins Pwnie Epic Achievement Award

The Pwnie Awards rank among the cybersecurity industry’s most closely watched honors, recognizing research that reshapes how defenders and vendors understand technical risk. Cheng-Da Tsai, better known as Orange Tsai, is a principal security researcher at Taiwan-based DEVCORE who specializes in zero-day and application-security research. His latest recognition highlights the continuing value of manually developed expertise as artificial intelligence and automated vulnerability-discovery tools spread across the industry.

The 2026 Pwnie Awards, announced in August, honored Tsai with the Epic Achievement award for a zero-click Microsoft Edge sandbox escape. At Pwn2Own Berlin, held May 14-16, he chained four pure logic flaws without AI assistance or memory-corruption techniques. The exploit earned $175,000 and 17.5 points, helping DEVCORE finish with 50.5 points and claim the Master of Pwn title. The result demonstrated that carefully constructed logic attacks can still bypass a modern browser’s isolation defenses.