thumbnail HackerOne paid ethical hackers over $300 million in bug bounties