Most bug bounty payouts go to the first person or group that report it, and only if the bug in question is novel to the company in question. I.e if you report

Most bug bounty payouts go to the first person or group that report it, and only if the bug in question is novel to the company in question. I.e if you report after someone else or report after it’s already been identified internally , you’re not likely to get a payout unless you have novel details