
is a lot older than Lopez and is referred to by HackerOne as the industry veteran. "It took me a long time to find my first vulnerability," Lopez recalls, "but with patience and effort it was achieved, and it was really worth it." His first bounty was just $50 (£40) in 2016 when he was 16. "I am a completely self-taught hacker," Lopez says, "and learned through the internet, online tutorials and by reading books." In 2015 Lopez signed up with the HackerOne platform and realized he could make some money from his skills. His route into hacking was inspired by watching the Hackers movie as a kid. Did he ever dream he could make that kind of money from hacking? "When I first got into hacking, I had no idea how much money could be made," Lopez admits, "I am incredibly proud to see that my work is recognized and valued." Santiago Lopez, just 19 and from Argentina, was the first of the HackerOne hackers to make a million dollars in bounties. At the live " H1-702" hacking event, around 100 hackers got together for three days of vulnerability hunting a total of $1.9 million (£1.5 million) was shared out between the hackers for finding more than 1,000 bugs.Īttending the H1-702 event, unsurprisingly, were those six hacking millionaires. This is the name given to the week in August that sees both Black Hat USA and DEF CON hacker conferences happening in Las Vegas. If you need any more convincing that hacking can be a very profitable career path, then you only have to look at the Hacker Summer Camp this year. Mercer reckons that the first bug bounty was launched some 30 years ago when a reward of $1,000 (£820) was offered for anyone who could find flaws in the operating system that powered the Hubble telescope. "HackerOne has half a million registered hackers, and 600 new people join every day," says Laurie Mercer, a security engineer at HackerOne, "and they have discovered over 130,000 vulnerabilities so far." The idea of offering bounties for vulnerabilities is far from being a new one. Department of Defense, and the hackers who can find the vulnerabilities in their systems and services before malicious threat actors can exploit them. HackerOne operates as the conduit between nearly 1,500 organizations, including the likes of General Motors, Goldman Sachs, Google, Intel, Microsoft, Spotify, Starbucks, Twitter and even the U.S.

HackerOne announced on August 29 that six hackers signed up to the bug bounty platform have earned more than $1 million each.
