Apply awarded a 100K bug bounty for a relatively simple – but admittedly high impact – bug. This researcher got lucky.
What if I say, your Email ID is all I need to takeover your account on your favorite website or an app. Sounds scary, right? This is what a bug in Sign in with Apple allowed me to do.
Source: Zero-day in Sign in with Apple