> Do Google or Facebook release a list of names and how much they paid for their bounty programs?

Names, yes; $, no.

[1]: https://www.google.com/about/appsecurity/hall-of-fame/reward... [2]: https://www.facebook.com/whitehat/