I got 5k for an OAuth bypass on one of Google APIs. The leaked data was much less harmful then being able to post on any twitter account.