The bounty could be very high. Last year one bug’s reporter was rewarded $250k. https://news.ycombinator.com/item?id=44861106

Maybe google is an exception (but then again, maybe that payout was part marketing to draw more researchers).

	▲	throwaway150 an hour ago \| parent [-]
		So is there anything that would actually satisfy crowd here? Offer $25K and it is "How dare a trillion dollar company pay so little?" Offer $250K and it is "Hmm. Exception! Must be marketing!" What precisely is an acceptable number?