[jalk]

I don’t know why, but I was disappointed they didn’t disclose how much the reward was.

[belter]

Per their published table, not more than $13,337

https://bughunters.google.com/about/rules/6625378258649088/g...

[londons_explore]

Hopefully not very much... They were 'caught' by googles security team.

Who knows - if Google hadn't detected the intrusion, this attack might be on the black market by now.

[tptacek]

Probably not. There's no coherent market for serverside vulnerabilities of any sort.