Yahoo has paid over $1 million to security researchers via its bug bounty program

Of the 10,000 submissions, approximately 1,500 have resulted in a bounty payout.