I should also note that that's $20k for a bug or series of bugs, not an exploit. Considering the monumental effort required to write a stable, viable exploit, getting 1/5 of the money (in theory) could well be worth it.