He got 30k from Instagram for the exact same concurrent bruteforce attack on their password reset flow.