>$5 million in bounties has been paid to 2,000 contributing hackers for finding over 14,000 vulnerabilities
Thats an average of $357/vuln - or $2,500 per "hacker" -- or if you assume everyone shared the 357/vuln that would only equate to $.17 per hacker per vuln.
That seems really really low.
What % of the $5MM or the 14K did the top hacker or group take home?
How long is the tail of zero $$ per hacker in the community of the 2K?
(I met the founder on bart some time ago and was trying to get their services at my last company, and I was just literally this morning thinking about H1 as I need to have my PII SaaS system evaluated... but I am interested in the economics of this as well)