HackerOne announced that the bug bounty hunter Cosmin Iordache was the first to earn more than $2,000,000 in bounty awards. The Romanian white hat hacker reported security flaws in systems and services of prominent organizations including Verizon Media, Dropbox, Facebook, Spotify, AT&T, PayPal, TikTok, Twitter, Uber, and GitHub. According to HackerOne, in March 2019 the first hacker that become a millionaire was Santiago Lopez (19). According to the HackerOne platform, around 12% of hackers earn over $20,000 each year in bug bounties.”]
Source: https://securityaffairs.co/wordpress/112678/hacking/hackerone-bug-bounty-hunter-2m.html