&gt;<i></i><i>$5 million in bounties has been paid to 2,000 contributing hackers for finding over 14,000 vulnerabilities</i><i></i><p>Thats an average of $357&#x2F;vuln - or $2,500 per &quot;hacker&quot; -- or if you assume everyone shared the 357&#x2F;vuln that would only equate to $.17 per hacker per vuln.<p>That seems really really low.<p>What % of the $5MM or the 14K did the top hacker or group take home?<p>How long is the tail of zero $$ per hacker in the community of the 2K?<p>(I met the founder on bart some time ago and was trying to get their services at my last company, and I was just literally this morning thinking about H1 as I need to have my PII SaaS system evaluated... but I am interested in the economics of this as well)