The bounty could be very high. Last year one bug’s reporter was rewarded $250k. https://news.ycombinator.com/item?id=44861106
Maybe google is an exception (but then again, maybe that payout was part marketing to draw more researchers).
Maybe google is an exception (but then again, maybe that payout was part marketing to draw more researchers).