A guy oops’d into owning 7,000 robot vacuums and DJI paid him $30K
7,000 robot vacuums. One guy. Total control. If you’ve ever wondered what it feels like to be a Bond villain but with crumbs and pet hair, congrats—you’re spiritually there.
A security researcher found a bug in Romo robovacs and “accidentally” seized control of around 7,000 of them. Not like “my TV remote is acting weird” control. Like: your little floor Roomba cousin is now taking orders from a stranger who could, in theory, schedule a synchronized 3 a.m. screech-and-dash across thousands of apartments.
DJI paid him a $30,000 bug bounty, which is corporate for “please don’t post the proof-of-concept and ruin our next five quarters.”
Translation
they just learned their product ships with a feature called Remote Chaos, and the only thing standing between your sleeping face and a possessed hockey puck is a random nerd’s personal ethics.
The Number
$30,000 — that’s about $4.28 per hijacked vacuum. You’ve tipped more for a latte while your barista spelled your name like a medieval curse.
And before anyone says “no one would ever weaponize robot vacuums,” please remember: people run ransomware on hospitals. People cheat in Wordle. Humanity is a raccoon with Wi‑Fi.
Meanwhile, every “smart” device in your home is speedrunning the same business model: ship it fast, patch it later, call it innovation, and make you the unpaid beta tester living inside the experiment.
Translation
you didn’t buy a vacuum—you adopted a tiny internet-connected liability with wheels.
The Bottom Line
If a dude can accidentally build a vacuum botnet, your ‘smart home’ is just a lightly disguised hostage situation with a monthly charge.
TLDR
Some researcher accidentally took over 7,000 Romo robot vacuums and DJI basically venmo’d him $30K to never do that again.
The app is coming.
6 AI-powered games daily, audio narration, push alerts, and the smoothest news experience on your phone. Launching soon on iOS.
iOS App Coming SoonWant this in your inbox?
Free daily briefing every morning.