Santiago Lopez, 19, is the first hacker to earn over USD 1 million from reporting security vulnerabilities on HackerOne. Lopez is self-taught, his hacker school was the internet, where he watched tutorials on how to bypass or defeat security protections. Lopez has a record of 1676 vulnerabilities submitted for online assets belonging to big-name companies like Verizon, Automattic, Twitter, HackerOne, private companies, and even the US government. The goal of the program is to reach $100 million by the end of 2020.
Source: https://www.bleepingcomputer.com/news/security/first-hacker-millionaire-on-hackerone/