Apple itself pays $1-million for bug bounties of this type.
https://security.apple.com/bounty/categories/
Reply on news.ycombinator.com