Even if you get the maximum amount, that is still less than the NSO (recently acquired by "Investors") would offer for a zero-day.

Up to, so you will get like 1000USD, like another fool who decided to participate in bug bounty.

https://9to5mac.com/2025/07/31/apple-security-bounties-pay-u...

Because that XSS wasn’t actually critical, the CVSS string was also incorrect because it was filled out by the researcher and wasn’t actually assessed by NVD.

Earlier: https://news.ycombinator.com/item?id=45536948