This is a digitally issued Certificate of Appreciation, not a paid bug bounty reward. Verify any certificate at /security/verify.