The max payout for the company's bug bounty program increases from $1 million to $2 million, though someone could theoretically earn up to $5 million for a double submission.