Not for reporting bugs. For reporting security bugs. Google also doesn't offer such bounties when merely reporting bugs. I report all kinds of Canvas issues to

Not for reporting bugs. For reporting security bugs. Google also doesn't offer such bounties when merely reporting bugs. I report all kinds of Canvas issues to Chromium. Half of them aren't even acknowledged, even if they get fixed months later. Google only gives bounties on security bugs, and as far as I know only significant ones (though we'll see, because I just reported an incredibly minor security bug to Chromium - getImageData in Canary is capable of getting image data from outside the Canvas, which is against spec and a security flaw)