Google has expanded the scope of its vulnerability rewards program to include the latest versions of its Nexus mobile devices. The Android Security Rewards program is a complement to the existing Google bug bounties for the Chrome browser and other Google products. The top-end reward for a critical Android bug approaches $40,000; that would involve a single exploit or a chain of attacks that compromise the Android TrustZone or Verified Boot from an installed app will be worth $30,000 on top of as much as $8,000 for the initial bug, reproduction code, test cases and a patch.
Source: https://threatpost.com/google-launches-android-security-rewards-for-nexus-devices/113335/

